Lists (21)
C
littlecompiler
编译器相关，创建脚本语言CSharp
load a native dll from memoryDetection
蓝队 检测 查杀Evasion
ABU TechniquesHook
About Hooks such as Inline-hook,IAT hook, detect hookImplant
跨平台植入端调研IOCP
Kernel
内核LPE
Windows本地权限提升Obfuscation
pe
About PE Parser and ExecutionPowershell
Privilege Elevate
提权Shellcode
shellcode executionSocks
Socks proxyStealthy
HidingTools
windows
restart manager数据结构/算法
数据结构和各种算法漏洞挖掘
Windows内核漏洞Stars
skeeto / quad-tree
Forked from leonmavr/quad-treePoint quadtree data structure implementation in C
🌐 Jekyll is a blog-aware static site generator in Ruby
Information from Microsoft about the PDB format. We'll try to keep this up to date. Just trying to help the CLANG/LLVM community get onto Windows.
Humane API for storing and accessing persistent data in IDA Pro databases
Official repository for IPython itself. Other repos in the IPython organization contain things like the website, documentation builds, etc.
An IDA Pro Plugin for embedding an IPython Kernel
该漏洞存在于 NtQueryInformationToken 函数中，特别是在处理AuthzBasepCopyoutInternalSecurityAttributes 函数时，该漏洞源于内核在操作对象时对锁定机制的不当管理，这一失误可能导致恶意实体意外提升权限。
A C testing library in 1 file. No dependencies, no dynamic allocation. ISC licensed.
Black Angel is a Windows 11/10 x64 kernel mode rootkit. Rootkit can be loaded with enabled DSE while maintaining its full functionality.
a tool used to analyze and monitor in named pipes
Sample for Creating a new kernel object type and supporting API
A C#/.NET library to run LLM (🦙LLaMA/LLaVA) on your local device efficiently.
Converted phnt (Native API header files from the System Informer project) to IDA TIL, IDC (Hex-Rays).
Windows上高性能异步IPC实现（基于命名管道）。A high-performance asynchronous IPC implementation on Windows (based on named pipes).
Exploit for CVE-2023-36802 targeting MSKSSRV.SYS driver