waleedassar Goto Github PK

alpc_client_server

Demo to show how write ALPC Client & Server using native Ntdll.dll syscalls.

antidebug

Collection Of Anti-Debugging Tricks

call64

Bypass Wow64 Emulation Layer

coffparser

A small python script that parses COFF .Obj files

cve-2021-1656

cve-2021-1699

POC for CVE-2021-1699

cve-2021-24098

POC for CVE-2021-24098

cve-2021-31184

cve-2022-24483

POC For CVE-2022-24483

disablecriticalprocesses

A tool for disabling all critical processes on the system.

doc

Some python scripts for parsing Microsoft Office Documents

eml

Some python scripts for manipulating EML files

extractrfc2397files

A python script to extract files embedded in the form of "data:image/png;base64,.....

gif

Some python scripts for handling GIF files

kecreateenclave_nullptr_dereference_dos

libextractor

A simple python script to parse and extract data from static and import libraries

lowbox

lowonresources

middleeastmalware

Samples, Analysis, Scripts, etc of malware seen in the Middle East

misc

mydumper64

nativeattacherdebugger

Code to demonstrate how to user native syscalls to create a debugger

nativedebugger

Code to demonstrate how to use native NT syscalls to create a debugger

nduregisterinterfacebytecountlimitexceeded_bug

nevershowext

C Project For Detecting All Invisible Windows File Extensions.

ntcreatexstatechange

Code to show how to use new NtCreateProcessStateChange/NtCreateThreadStateChange syscalls

ntinitializeenclave_dos_poc

ntmanagepartition_dpc_watchdog_violation

ntpsscapturevaspacebulk

How to use the new "NtPssCaptureVaSpaceBulk" syscall.

obpcreatesymboliclinkname_eop