kycgni,kycgni,github

simpleator

Simpleator ("Simple-ator") is an innovative Windows-centric x64 user-mode application emulator that leverages several new features that were added in Windows 10 Spring Update (1803), also called "Redstone 4", with additional improvements that were made in Windows 10 October Update (1809), aka "Redstone 5".

smbdoor

Windows kernel backdoor via registering a malicious SMB handler

snifferui

基于MFC和Winpcap库开发的网络抓包软件

speakeasy

Windows kernel and user mode emulation.

strings2

strings2: An improved strings extraction tool.

stringsx64dbg

Strings plugin for x64dbg

stupidkeylogger

A Terrific Keystroke Recorder (keylogger-key-logger-spyware-spy-trojan-simple-virus-for-windows-10-7-xp-smart)

swissarmyknife

x64dbg utility for linker map files, diff files, PEiD/IDA signatures, and code signature generation

taskexplorer

Power full Task Manager

tdl

Driver loader for bypassing Windows x64 Driver Signature Enforcement

threadstackspoofer

Thread Stack Spoofing - PoC for an advanced In-Memory evasion technique allowing to better hide injected shellcode's memory allocation from scanners and analysts.

tinyvm

TinyVM is a small, fast, lightweight virtual machine written in pure ANSI C.

titanengine

uiforetw

User interface for recording and managing ETW traces

unicorn

Unicorn CPU emulator framework (ARM, AArch64, M68K, Mips, Sparc, X86)

unicorn-1

Unicorn is a simple tool for using a PowerShell downgrade attack and inject shellcode straight into memory. Based on Matthew Graeber's powershell attacks and the powershell bypass technique presented by David Kennedy (TrustedSec) and Josh Kelly at Defcon 18.