yusufqk Goto Github PK

ah2021workshop

Malware development for red teaming workshop

anti-delete

Protects deletion of files with a specified extension using a kernel-mode driver.

apihashes

IDA Pro plugin for recognizing known hashes of API function names

ares

Project Ares is a Proof of Concept (PoC) loader written in C/C++ based on the Transacted Hollowing technique

awesome-ida-x64-olly-plugin

A curated list of IDA x64DBG and OllyDBG plugins.

bokuloader

Cobalt Strike User-Defined Reflective Loader written in Assembly & C for advanced evasion capabilities.

bootkit

UEFI bootkit: Hardware Implant. In-Progress

bootkits

c2-tool-collection

A collection of tools which integrate with Cobalt Strike (and possibly other C2 frameworks) through BOF and reflective DLL loading techniques.

coffloader2

Load and execute COFF files and Cobalt Strike BOFs in-memory

cs-situational-awareness-bof

Situational Awareness commands implemented using Beacon Object Files

defcon-25-workshop

Windows Post-Exploitation / Malware Forward Engineering DEF CON 25 Workshop

detectcobaltstomp

Detects Module Stomping as implemented by Cobalt Strike

doubleagent

Zero-Day Code Injection and Persistence Technique

edrs

efiguard

Disable PatchGuard and DSE at boot time

fwimplants

herpaderping

Process Herpaderping proof of concept, tool, and technical deep dive. Process Herpaderping bypasses security products by obscuring the intentions of a process.

hypervisor-from-scratch

Source code of a multiple series of tutorials about the hypervisor. Available at: https://rayanfam.com/tutorials

infinityhook

Hook system calls, context switches, page faults and more.

inject-assembly

Execute .NET in an Existing Process

kaynldr

KaynLdr is a Reflective Loader written in C/ASM

kernelforge

A library to develop kernel level Windows payloads for post HVCI era

learning-reverse-engineering

This repository contains sample programs written primarily in C and C++ for learning native code reverse engineering.

malware-analysis-and-reverse-engineering

Some of my publicly available Malware analysis and Reverse engineering.

midrashim

PT_NOTE to PT_LOAD x64 ELF infector written in Assembly

mypass

Command-line tool that serves as a password manager

nidhogg

Nidhogg is an all-in-one simple to use rootkit for red teams.

ninjasploit

A meterpreter extension for applying hooks to avoid windows defender memory scans

osiris-sourcecode

Alleged source code leak of Osiris banking trojan