KasperskyLab / VBscriptInternals
Scripts for disassembling VBScript p-code in the memory to aid in exploits analysis
☆83Updated 2 years ago
Related projects: ⓘ
- ☆112Updated 8 years ago
- ANBU (Automatic New Binary Unpacker) a tool for me to learn about PIN and about algorithms for generic unpacking.☆88Updated 5 years ago
- Parsers for custom malware formats ("Funky malware formats")☆92Updated 2 years ago
- ☆117Updated this week
- Simple library to spray the Windows Kernel Pool☆102Updated 4 years ago
- Shellcode emulator written with Unicorn Framework With Process Dump Emulation Environment☆117Updated 4 years ago
- Another Repo of Malware. Enjoy. <3☆60Updated 5 years ago
- A Fuzzer for Windows NDIS Drivers OID Handlers☆91Updated 2 years ago
- Transfer EIP control to shellcode during malware analysis investigation☆73Updated 9 years ago
- Two IDAPython Scripts help you to reconstruct Microsoft COM (Component Object Model) Code☆177Updated 3 years ago
- Extract OLEv1 objects from RTF files by instrumenting Word☆51Updated 4 years ago
- ☆84Updated this week
- ☆140Updated this week
- FLARE Kernel Shellcode Loader☆176Updated 5 years ago
- POC viruses I have created to demo some ideas☆58Updated 4 years ago
- ☆99Updated 3 months ago
- A tool to exploit .NET DCOM for EoP and RCE. Is fixed in latest versions of the .NET.☆84Updated 9 years ago
- Driver Initial Reconnaissance Tool☆119Updated 4 years ago
- elgoog/searchme challenge from 34C3 CTF / WCTF 2018: sources & exploit☆67Updated 6 years ago
- Implements the POP/MOV SS (CVE-2018-8897) vulnerability by leveraging SYSCALL to perform a local privilege escalation (LPE).☆116Updated 6 years ago
- ☆56Updated this week
- Collection of VC++ example applications to demonstrate Win10 userland heap behavior (BEA & FEA)☆84Updated 8 years ago
- ☆33Updated 9 years ago
- Exploit code used for the HackSysExtremeVulnerableDriver.☆43Updated 6 years ago
- Windows NT ioctl bruteforcer and modular fuzzer☆119Updated 5 years ago
- Yet another Python library to read and write PE/PE+ files.☆80Updated 7 years ago
- Zerokit/GAPZ rootkit (non buildable and only for researching)☆179Updated 5 years ago
- ☆26Updated 10 years ago
- [ARCHIVED] mov rax, ${Thalium/IceBox}; jmp rax;☆72Updated 5 years ago