am0nsec / vx
Virus Exchange (VX) - Collection of malware or assembly code used for "offensive" purposed.
☆178Updated 3 years ago
Alternatives and similar repositories for vx:
Users that are interested in vx are comparing it to the libraries listed below
- Windows System Programming Experiments☆218Updated 2 years ago
- ☆134Updated last month
- A helper utility for creating shellcodes. Cleans MASM file generated by MSVC, gives refactoring hints.☆174Updated 4 months ago
- Skrull is a malware DRM, that prevents Automatic Sample Submission by AV/EDR and Signature Scanning from Kernel. It generates launchers t…☆455Updated 3 years ago
- Kernel Exploits☆251Updated 3 years ago
- My notes while studying Windows exploitation☆187Updated last year
- The source code files that accompany the short book "Building C2 Implants in C++: A Primer" by Steven Patterson (@shogun_lab).☆227Updated 4 months ago
- Leverage AMSI (Antimalware Scan Interface) technology to aid your analysis. This tool saves all buffers (scripts, .NET assemblies, etc) …☆109Updated 3 years ago
- ☆477Updated 2 years ago
- Expriments☆452Updated 6 months ago
- WTSRM☆209Updated 2 years ago
- Enumerating and removing kernel callbacks using signed vulnerable drivers☆558Updated 2 years ago
- Tools and technical write-ups describing attacking techniques that rely on concealing code execution on Windows☆207Updated 2 years ago
- ☆515Updated 2 weeks ago
- KaynLdr is a Reflective Loader written in C/ASM☆531Updated last year
- Conti Locker source code☆191Updated 3 years ago
- Phantom DLL hollowing PoC☆359Updated 2 years ago
- Exploit Development - Weaponized Exploit and Proof of Concepts (PoC)☆220Updated last year
- Managed assembly shellcode generation☆266Updated 4 years ago
- Tools and PoCs for Windows syscall investigation.☆359Updated 3 months ago
- FreshyCalls tries to make the use of syscalls comfortable and simple, without generating too much boilerplate and in modern C++17!☆328Updated 2 years ago
- Yet another variant of Process Hollowing☆389Updated 2 months ago
- Unprotect is a collaborative platform dedicated to uncovering and documenting malware evasion techniques. We invite you to join us in thi…☆158Updated 2 weeks ago
- EarlyBird process hollowing technique (BOF) - Spawns a process in a suspended state, inject shellcode, hijack main thread with APC, and e…☆279Updated 2 years ago
- Simple EDR implementation to demonstrate bypass☆172Updated 4 years ago
- Extract Windows Defender database from vdm files and unpack it☆439Updated 5 years ago
- PoC Implementation of a fully dynamic call stack spoofer☆760Updated 8 months ago
- Set of antianalysis techniques found in malware☆132Updated last year
- Moneta is a live usermode memory analysis tool for Windows with the capability to detect malware IOCs☆738Updated last year
- GhostWriting Injection Technique.☆170Updated 7 years ago