The ORIGINAL decrypted copies of the Shadow Broker's equation_drug release. Contains Equation group's espionage DLL implants library. Use for research purposes only.
☆26Jan 29, 2018Updated 8 years ago
Alternatives and similar repositories for EquationDrug
Users that are interested in EquationDrug are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- The ORIGINAL decrypted copies of the Shadow Broker's Don't Forget Your Base release. Contains Equation group's collection of tools primar…☆18Jan 29, 2018Updated 8 years ago
- header only library for NtLoadDriver/NtUnloadDriver.☆11Sep 8, 2020Updated 6 years ago
- Header-only compile-time string obfuscation for C++, hiding literals from static analysis and reacting to debuggers at runtime.☆15Oct 5, 2026Updated 3 weeks ago
- EQGRP: Replicating DarkPulsar, an DLL capable of hooking Security Package Method Tables on the Heap!☆15Oct 11, 2020Updated 6 years ago
- Demonstrates consuming from a SecurityTrace ETW session by consuming from the Threat-Intelligence ETW provider without a driver or PPL pr…☆14Jan 18, 2026Updated 9 months ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- x86 and x64 assembly "read-eval-print loop" for Windows☆38Aug 13, 2017Updated 9 years ago
- JavaScript exploit : Firefox version 41 - 50 are affected. Easy fix by disabling JavaScript (use NoScript for better leverage). Victim mu…☆20Jan 22, 2017Updated 9 years ago
- Arduino based device for reading Mifare cards from a distance using RC522 module and an OLED display for portable reading of card data.☆19Nov 21, 2018Updated 7 years ago
- A x64 Position Independent Proxy Enumerator Shellcode (PIPES)☆27Nov 14, 2025Updated 11 months ago
- Data and structures regarding the research done on WdFilter☆12Apr 15, 2020Updated 6 years ago
- CVE-2022-24494☆13May 27, 2022Updated 4 years ago
- Reverse engineered APT38 DYEPACK samples used to empty SWIFT banking servers. Use caution when handling live binaries.☆24Mar 20, 2019Updated 7 years ago
- all the fun stuff that windows has to offer☆12Jan 23, 2021Updated 5 years ago
- #INFILTRATE19 raptor's party pack.☆33Jul 18, 2026Updated 3 months ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Taking advantage of CRT initialization, to get away with hooking protected applications☆60Aug 19, 2026Updated 2 months ago
- ☆12Apr 17, 2017Updated 9 years ago
- Enumerate Callbacks and all Object Types☆17Jan 9, 2023Updated 3 years ago
- A template programming library for Kernel Mode Windows drivers.☆13Jul 12, 2016Updated 10 years ago
- A fancy in-place decryptor for the ClipSp.sys kernel driver included with Windows☆23Jan 12, 2026Updated 9 months ago
- Packet Injection With WFP☆16Jun 5, 2026Updated 4 months ago
- PPLwindow PPL Bypass via GetProcessHandleFromHwnd☆55Dec 29, 2025Updated 10 months ago
- All xxx-arsenal repos in one☆16Jan 28, 2019Updated 7 years ago
- Vulnerability research on the CA UIM Nimbus protocol☆15Sep 28, 2020Updated 6 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- A simple C++ driver base with KD data block☆11Jun 25, 2022Updated 4 years ago
- Reversed WintaPix Malware Source code | That targets countries in the Middle East and abuse KeServiceDescriptorTable(SSDT), persistence a…☆21Jul 6, 2024Updated 2 years ago
- From 2011: Quickly search for files in NTFS volumes parsing the Master File Table (MFT). A decent amount of how NTFS and MFT work was pai…☆28Oct 14, 2019Updated 7 years ago
- a windows kernel keylogger that works☆20Feb 12, 2024Updated 2 years ago
- Ntdll Unhooking POC☆18Aug 12, 2022Updated 4 years ago
- Malware dev tricks: parent PID spoofing. C++ implementation☆12Sep 7, 2022Updated 4 years ago
- My Preparations for the "macOS Control Bypasses (EXP-312-osmr)" Course By OffensiveSecurity.☆25Sep 22, 2021Updated 5 years ago
- Idiomatic Rust Bindings for Windows Hypervisor Platform☆13Apr 11, 2026Updated 6 months ago
- Binary Ninja plugin to perform automated analysis of Windows drivers☆20Aug 8, 2019Updated 7 years ago
- Serverless GPU API endpoints on Runpod - Get Bonus Credits • AdSkip the infrastructure headaches. Auto-scaling, pay-as-you-go, no-ops approach lets you focus on innovating your application.
- Harness to issue Virtual Secure Mode (VSM) "secure calls" from VTL 0 to VTL 1☆89Sep 8, 2025Updated last year
- Exploit for Mass Remote Code Execution on GPON home routers (CVE-2018-10562) obtained from Shodan.☆24May 26, 2018Updated 8 years ago
- Crystal Palace library for proxying Nt API calls via the Threadpool. Updated for call gadgets.☆23Nov 11, 2025Updated 11 months ago
- GAUSS MALWARE Source [Striking similarities with Duqu, FlameR!, Fanny, StuxNet and more.] Source coming soon! + Binaries + Video show…☆18Aug 4, 2022Updated 4 years ago
- Minimalistic HTTP(S) client for the NT kernel☆61Dec 1, 2025Updated 10 months ago
- Microcode testing from UEFI☆28Oct 20, 2025Updated last year
- C++ Assembler with Built-in Mutation Engine☆31Sep 6, 2025Updated last year