zhuzhu-top Goto Github PK

addrsearch

findpattern signature memory scan for any ring3 process search base 基址搜索

av_evasion_tool

掩日 - 免杀执行器生成工具

bak

bakup

blackbone

Windows memory hacking library

blackboxprotobuf

Blackbox protobuf is a Burp Suite extension for decoding and modifying arbitrary protobuf messages without the protobuf type definition.

elf-dump-fix

Utils use to dump android ELF from memory and do some fix including the ELF section header rebuilding

ezprotect

一个Native层的Android应用防护库（A native layer Android application protection library）

frida_dump

frida dump dex, frida dump so

fridacontainer

FridaContainer 整合了网上流行的和自己编写的常用的 frida 脚本，为逆向工作提效之用。 frida 脚本模块化，Java & Jni Trace。

ida-cmake

Simple CMake files for the IDASDK

ida-strikeout

IDA strike-out: A Hex-Rays decompiler plugin to patch the Ctree

ipad

jni-frida-hook

Script to quickly hook natives call to JNI in Android

mirai

全开源 QQ机器人/QQ协议支持库 Protocol library for Tencent QQ/TIM

mmtls

wechat mmtls demo

obpo-plugin

An ida plugin for recovering control flow flattening

okhttp_find

根据特征寻找okhttp3，利用java反射。

opensslbyandroid

基于openssl实现AES、DES、RSA、MD5、SM3、SM4等加解密和摘要功能

parsepb

无proto文件解析protobuf序列化后的内容

protobuf-finder

IDA Pro plugin for reconstructing original .proto files from binary.

protobufparser

puppet-xp

Wechaty Puppet WeChat Windows Protocol

rs-qq

Rust 模拟QQ客户端协议 已完成 扫码登录/密码登录/获取好友列表/获取群列表/发送群消息/接受群消息。运行src/bin的password_login.rs或qrcode_login.rs体验。重构中在refactor分支（正在努力减少unwrap）

sandvxposed

Xposed environment without root (OS 5.0 - 12.0)

sayhi

superdllhijack

SuperDllHijack：A general DLL hijack technology, don't need to manually export the same function interface of the DLL, so easy! 一种通用Dll劫持技术，不再需要手工导出Dll的函数接口了

titan

Titan is a VMProtect devirtualizer

trace_natives

一个小脚本，用于trace so中native函数的调用。

tweakme

android免root native层与java层注入框架

twoyi

A lightweight Android container on Android