Easily train a good VC model with voice data <= 10 mins!

Video, audio & banner adblock/skip for Spotify

A simple direct syscall wrapper written in C++ with compatibility for x86 and x64 programs.

Mythic C2 agent targeting Linux and Windows hosts written in Rust

Monitor windows kernel event, based on etw, development in rust. A replacement of procmon. more events and useful filter. Typically can check handle leak for a few weeks.

Advanced dynamic malware analysis tool.

Advanced Privacy Tool for Windows

Pseudo-malicious usermode memory artifact generator kit designed to easily mimic the footprints left by real malware on an infected Windows OS.

Evasion by machine code de-optimization.

Kernel driver + GUI app that exposes useful iDevice interfaces to a Windows machine

Aims to identify sleeping beacons

A Tool that aims to evade av with binary padding

Leaked Mirai Source Code for Research/IoC Development Purposes

Simple and lightweight hypervisor for AMD processors

Shellcode loader using direct syscalls via Hell's Gate and payload encryption.

内网穿透工具 基于Python/WebSocket实现, Expose your local services to the internet.

Example of building an application verifer DLL

Extracted Yara rules from Windows Defender mpavbase and mpasbase

PE Tools - Portable executable (PE) manipulation toolkit

Protect, Unprotect, Filter handles, Create handle, and Read memory by abusing a signed Kernel driver.

The JsRuntimeHost is a library that provides cross-platform C++ JavaScript hosting for any JavaScript engines with Node-API support such as Chakra, V8, or JavaScriptCore.

Technion CS Ransomware Project: Writing Windows Mini-Filter Driver to protect PC from Ransomware

parsec-vdd-cli是parsec-vdd驱动控制应用程序的命令行版本，可替代Easy-Virtual-Display托盘程序

✨ Perfect 4K@240Hz Virtual Display

A private Lumina server for IDA Pro

btrace：binder_transaction+eBPF+Golang实现通用的Android APP动态行为追踪工具

A lightning-fast memory pattern scanner, capable of scanning gigabytes of data per second.