havenlabs / seconddateLinks
Source data & analysis of NSA SECONDDATE packet-injection framework
☆11Updated 8 years ago
Alternatives and similar repositories for seconddate
Users that are interested in seconddate are comparing it to the libraries listed below
Sorting:
- Rust bindings for VMProtect.☆27Updated last year
- rekk is set of tools written in Rust to obfuscate ELF & PE executables with nanomites.☆31Updated last year
- PEIM (UEFI) bootkit targeting OVMF (EDK2)☆41Updated 2 years ago
- Cargo subcommand to build a crate into shellcode☆26Updated last year
- Black cat magic ฅ(^・ω・^ฅ ✿)☆55Updated 3 years ago
- A rust based DLL injection project☆31Updated 3 years ago
- Report and exploit of CVE-2023-36427☆90Updated 2 years ago
- In-memory hiding technique☆63Updated last year
- Rust implementation of lazy_importer☆59Updated 2 years ago
- Slaying multi-language LLVM IR with obfuscation passes to achieve JIT execution☆130Updated last month
- A KISS Rust crate to parse Windows kernel crash-dumps created by Windows & its debugger.☆42Updated last month
- Minimalistic Windows Kernel Allocator.☆51Updated last year
- ☆61Updated 2 years ago
- rust clr heap encryption (https://github.com/lap1nou/CLR_Heap_encryption), but no heap encryption.☆17Updated 2 years ago
- Static analysis tool based on clang, which detects source-to-binary information leaks in C and C++ projects☆86Updated 3 years ago
- ☆39Updated 2 years ago
- A thin Rust wrapper around Windows' hardware breakpoints.☆21Updated 3 years ago
- Demonstrates consuming from a SecurityTrace ETW session by consuming from the Threat-Intelligence ETW provider without a driver or PPL pr…☆60Updated 2 weeks ago
- POC of CVE-2022-21881 exploited at TianfuCup 2021 to escape Chrome Sandbox☆21Updated 3 years ago
- Analysis of the vulnerability☆50Updated 2 years ago
- A PoC packer written in Rust!☆74Updated 3 years ago
- Reflective DLL self-loading as a library☆21Updated 9 months ago
- doesnt work and wont work on it anymore☆10Updated last year
- ☆59Updated last year
- WslinkVMAnalyzer is a tool to facilitate analysis of code protected by a virtual machine featured in Wslink malware☆48Updated 3 years ago
- Example of building an application verifer DLL☆51Updated last year
- Inject a shellcode in a remote process using Process Hollowing.☆54Updated 4 years ago
- Check if your AV/EDR does inline hooking, displays the hooked functions and allows you to compare them with the original ones.☆36Updated 9 months ago
- Fuzzing Harness and Unpatched Crash Results from Fuzzing Defender MpEngine☆39Updated 6 months ago
- This is a crash for Brave Browser I found in New Years Eve, used to be a 0day when I found it☆18Updated 3 years ago