am0nsec / vxLinks
Virus Exchange (VX) - Collection of malware or assembly code used for "offensive" purposed.
☆181Updated 3 years ago
Alternatives and similar repositories for vx
Users that are interested in vx are comparing it to the libraries listed below
Sorting:
- Windows System Programming Experiments☆218Updated 3 years ago
- Kernel Exploits☆255Updated 3 years ago
- A helper utility for creating shellcodes. Cleans MASM file generated by MSVC, gives refactoring hints.☆179Updated 2 months ago
- The source code files that accompany the short book "Building C2 Implants in C++: A Primer" by Steven Patterson (@shogun_lab).☆229Updated 6 months ago
- Leverage AMSI (Antimalware Scan Interface) technology to aid your analysis. This tool saves all buffers (scripts, .NET assemblies, etc) …☆109Updated 4 years ago
- ☆135Updated 3 months ago
- Set of antianalysis techniques found in malware☆132Updated last year
- Expriments☆463Updated 8 months ago
- WTSRM☆212Updated 2 years ago
- Yet another variant of Process Hollowing☆400Updated 4 months ago
- A simple implant showcasing modern C++☆106Updated 4 years ago
- KaynLdr is a Reflective Loader written in C/ASM☆540Updated last year
- My notes while studying Windows exploitation☆188Updated last year
- Skrull is a malware DRM, that prevents Automatic Sample Submission by AV/EDR and Signature Scanning from Kernel. It generates launchers t…☆457Updated 3 years ago
- Extract Windows Defender database from vdm files and unpack it☆443Updated last week
- Unprotect is a collaborative platform dedicated to uncovering and documenting malware evasion techniques. We invite you to join us in thi…☆165Updated 2 months ago
- Conti Locker source code☆194Updated 3 years ago
- Exploit Development - Weaponized Exploit and Proof of Concepts (PoC)☆222Updated 2 years ago
- Simple EDR implementation to demonstrate bypass☆173Updated 5 years ago
- A shellcode function to encrypt a running process image when sleeping.☆339Updated 3 years ago
- Enumerating and removing kernel callbacks using signed vulnerable drivers☆566Updated 2 years ago
- Research on Anti-malware and other related security solutions☆259Updated 4 years ago
- NINA: No Injection, No Allocation x64 Process Injection Technique☆225Updated 5 years ago
- Tools and PoCs for Windows syscall investigation.☆361Updated 2 weeks ago
- Moneta is a live usermode memory analysis tool for Windows with the capability to detect malware IOCs☆755Updated last year
- My implementation of enSilo's Process Doppelganging (PE injection technique)☆620Updated 2 years ago
- An attempt to restore and adapt to modern Win10 version the 'Rootkit Arsenal' original code samples☆70Updated 3 years ago
- A variant of Gargoyle for x64 to hide memory artifacts using ROP only and PIC☆366Updated 3 years ago
- miscellaneous scripts and programs☆245Updated 5 months ago
- FreshyCalls tries to make the use of syscalls comfortable and simple, without generating too much boilerplate and in modern C++17!☆336Updated 2 years ago