am0nsec / vx
Virus Exchange (VX) - Collection of malware or assembly code used for "offensive" purposed.
☆178Updated 2 years ago
Alternatives and similar repositories for vx:
Users that are interested in vx are comparing it to the libraries listed below
- Windows System Programming Experiments☆217Updated 2 years ago
- Exploit Development - Weaponized Exploit and Proof of Concepts (PoC)☆218Updated last year
- ☆131Updated last year
- Leverage AMSI (Antimalware Scan Interface) technology to aid your analysis. This tool saves all buffers (scripts, .NET assemblies, etc) …☆92Updated 3 years ago
- ☆96Updated 3 years ago
- The source code files that accompany the short book "Building C2 Implants in C++: A Primer" by Steven Patterson (@shogun_lab).☆225Updated last month
- My notes while studying Windows exploitation☆184Updated last year
- Skrull is a malware DRM, that prevents Automatic Sample Submission by AV/EDR and Signature Scanning from Kernel. It generates launchers t…☆453Updated 3 years ago
- WTSRM☆206Updated 2 years ago
- A helper utility for creating shellcodes. Cleans MASM file generated by MSVC, gives refactoring hints.☆160Updated last month
- Conti Locker source code☆186Updated 2 years ago
- Tools and PoCs for Windows syscall investigation.☆356Updated last week
- Expriments☆455Updated 3 months ago
- Yet another variant of Process Hollowing☆356Updated 10 months ago
- MalUnpack companion driver☆93Updated 7 months ago
- Tools and technical write-ups describing attacking techniques that rely on concealing code execution on Windows.☆200Updated 2 years ago
- Kernel Exploits☆247Updated 3 years ago
- Unprotect is a collaborative platform dedicated to uncovering and documenting malware evasion techniques. We invite you to join us in thi…☆147Updated last week
- KaynLdr is a Reflective Loader written in C/ASM☆527Updated last year
- masm32 kernel programming, drivers, tutorials, examples, and tools (credits Four-F)☆116Updated last year
- A PoC implementation for spoofing arbitrary call stacks when making sys calls (e.g. grabbing a handle via NtOpenProcess)☆460Updated 2 years ago
- miscellaneous scripts and programs☆227Updated 2 years ago
- Phantom DLL hollowing PoC☆351Updated 2 years ago
- Evasive Process Hollowing Techniques☆135Updated 4 years ago
- Sleep Obfuscation☆706Updated last year
- Extract Windows Defender database from vdm files and unpack it☆433Updated 4 years ago
- A Feature Rich Modular Malware Configuration Extraction Utility for MalDuck☆124Updated last year
- A variant of Gargoyle for x64 to hide memory artifacts using ROP only and PIC☆352Updated 2 years ago
- Recon 2023 slides and code☆79Updated last year