backuphouse Goto Github PK

acepatcher

A simple to use, gui based program for patching .NET assemblies

acpi_sandbox_detect

通过ACPI检测沙箱

addscn

Add an empty section to a PE file

aesshellcodeinjector

This program will take encrypted shell code and decrypt it in run time and inject it into another process

algorithmcourse

一份算法教程和leetcode等平台的脑瘫教程

alpc_client_server

Demo to show how write ALPC Client & Server using native Ntdll.dll syscalls.

alternativeshellcodeexec

Alternative Shellcode Execution Via Callbacks

amogusplugin

VMP improved idea

amsi-unchained

Unchain AMSI by patching the provider’s unmonitored memory space

amsi_rubeus_bypass

anti-debugger

A simple anti-crack system

anti-debugging

A collection of c++ programs that demonstrate common ways to detect the presence of an attached debugger.

anti-debugnet

C# Anti-Debug and Anti-Dumping techniques using Win32 API functions and tricks.

antidbg

A bunch of Windows anti-debugging tricks for x86 and x64.

antidebuggers

30种方法检测程序是否被调试

antispy

AntiSpy is a free but powerful anti virus and rootkits toolkit.It offers you the ability with the highest privileges that can detect,analyze and restore various kernel modifications and hooks.With its assistance,you can easily spot and neutralize malwares hidden from normal detectors.

antivirtualmachine

8种检测虚拟机方法

antivirus

apicallproxy

Windows API Call Obfuscation

apihashes

IDA Pro plugin for recognizing known hashes of API function names

append_signed_pe

Append custom data to signed pe file and DONOT DESTROY SIGNED STATUS.

atompepacker

A Highly capable Pe Packer

awesome-vmp

虚拟化保护（VMP壳）分析相关资料

baby_obfuscator

Using LLVM Pass to obfuscate program

blackhat_asia2023

Black Hat Asia 2023 PDF Public

blacklotus

A attempt at replicating BLACKLOTUS capabilities, whilst not acting as a direct mimic.

bleak

A Windows native DLL injection library that supports several methods of injection.

bof-collection

Collection of Beacon Object Files (BOF) for Cobalt Strike

books

burpsuite

Burp Suite loader version --> ∞