huoji120/DuckSysEye external links

---

GitHub - View repository

GitHub.dev - Open in online code editor

Star history - Growth chart over time

deps.dev - Dependencies and security vulnerabilities

Gitingest - Export source code for LLM usage

Repomix - Export source code for LLM usage

uithub - Export source code for LLM usage

Close

huoji120/DuckSysEye

Readme badge preview -

If you own this repo, copy the snippet below and add it to your README.md

---

Copy

[![RelatedRepos](https://img.shields.io/badge/related-repos-yellow)](https://relatedrepos.com/gh/huoji120/DuckSysEye)

Close

huoji120 / DuckSysEyeView on GitHubMore

• External links
• Readme badge

SysEye是一个window上的基于att&ck现代EDR设计思想的威胁响应工具.有效检测常见的未知威胁与已知威胁.防守方的利剑

☆63Aug 23, 2022Updated 4 years ago

Alternatives and similar repositories for DuckSysEye

Users that are interested in DuckSysEye are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.

• DarkDuckDudes / duckcafe

  View on GitHub
  鸭鸭咖啡馆主要项目
  ☆16Sep 29, 2022Updated 4 years ago
• huoji120 / numen

  View on GitHub
  简单安排一下 autochk.sys 这个rootkit
  ☆72Mar 7, 2023Updated 3 years ago
• RoomaSec / RmEye

  View on GitHub
  戎码之眼是一个window上的基于att&ck模型的威胁监控工具.有效检测常见的未知威胁与已知威胁.防守方的利剑
  ☆532Oct 25, 2023Updated 3 years ago
• huoji120 / infosec_chrome_ext

  View on GitHub
  安全人员小助手油猴插件
  ☆13Aug 29, 2023Updated 3 years ago
• therealdreg / pdbdump_bochs

  View on GitHub
  Dump PDB Symbols including support for Bochs Debugging Format (with wine support)
  ☆14Aug 11, 2023Updated 3 years ago
• Deploy to Railway using AI coding agents - Free Credits Offer • Ad
  Use Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
• huoji120 / Microsoft_Kernel_Memory_Leak

  View on GitHub
  win32kbase!NtDCompositionCommitSynchronizationObject and win32kbase!NtGdiGetCertificate
  ☆16Oct 14, 2021Updated 5 years ago
• huoji120 / Etw-Syscall

  View on GitHub
  https://key08.com/index.php/2021/10/19/1375.html
  ☆70May 11, 2022Updated 4 years ago
• huoji120 / DuckMemoryScan

  View on GitHub
  检测绝大部分所谓的内存免杀马
  ☆729Sep 15, 2022Updated 4 years ago
• huoji120 / CobaltStrikeDetected

  View on GitHub
  40行代码检测到大部分CobaltStrike的shellcode
  ☆290Jul 25, 2021Updated 5 years ago
• huoji120 / MakeInfinityHookGreatAgain

  View on GitHub
  让Etwhook再次伟大! Make InfinityHook Great Again!
  ☆149Jun 24, 2021Updated 5 years ago
• conjojo / Microsoft_Exchange_Server_SSRF_CVE-2021-26855

  View on GitHub
  Microsoft Exchange Server SSRF漏洞(CVE-2021-26855)
  ☆36Mar 6, 2021Updated 5 years ago
• CitrusIce / ksc4cpp

  View on GitHub
  ksc4cpp is a shellcode framework for windows kernel based on C++
  ☆23Feb 10, 2023Updated 3 years ago
• RoomaSec / RmTools

  View on GitHub
  蓝队应急工具
  ☆540Jun 10, 2024Updated 2 years ago
• jas502n / coremail-checkwkpass

  View on GitHub
  enc8 密码碰撞脚本
  ☆33Jan 31, 2023Updated 3 years ago
• Deploy on Railway without the complexity - Free Credits Offer • Ad
  Connect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
• huoji120 / DuckSandboxDetect

  View on GitHub
  沙箱测试,测评国内常见沙箱的代码与结论
  ☆109Jul 3, 2021Updated 5 years ago
• huoji120 / safe_duck

  View on GitHub
  一款linux下的安全产品目的是满足个人安全需求有SSH爆破防护和SYN攻击扫描防护功能,基于netfilter,
  ☆23Dec 2, 2023Updated 2 years ago
• woodpecker-appstore / xmldecoder-payload-generator

  View on GitHub
  Java XMLDecoder payload generator
  ☆16Jul 27, 2021Updated 5 years ago
• r00tSe7en / ShadowlessFeet

  View on GitHub
  无影脚 - 命令行下的日志文件处理工具
  ☆49Nov 15, 2022Updated 3 years ago
• A-Normal-User / NtSocket_NtClient_NtServer

  View on GitHub
  Using NtCreateFile and NtDeviceIoControlFile to realize the function of winsock（利用NtCreateFile和NtDeviceIoControlFile 实现winsock的功能）
  ☆128Sep 9, 2022Updated 4 years ago
• TeamT5 / ShimcacheParser

  View on GitHub
  A simple parser(library) which extracts shimcache data from windows.
  ☆15May 20, 2019Updated 7 years ago
• Proaids26 / Tech-Driver-Source

  View on GitHub
  Popular driver source with guarded regions bypass
  ☆14Nov 12, 2022Updated 3 years ago
• Jasper1467 / WindowsDefender_Rebuild

  View on GitHub
  An attempt at reversing WindowsDefender
  ☆19Oct 6, 2024Updated 2 years ago
• ExpLangcn / HKTools

  View on GitHub
  一款辅助安全研发在日常工作中渗透测试、安全研究、安全开发等工作的工具！
  ☆13Nov 20, 2023Updated 2 years ago
• Wordpress hosting with auto-scaling - Free Trial Offer • Ad
  Fully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
• A-Normal-User / Pretend_HideVirtualMemory

  View on GitHub
  利用物理内存映射，实现虚拟内存的伪隐藏
  ☆84Sep 15, 2022Updated 4 years ago
• smallzhong / hide_execute_memory

  View on GitHub
  隐藏可执行内存
  ☆276Apr 27, 2025Updated last year
• DragonQuestHero / WindowsSyscallsEx

  View on GitHub
  Quick check of NT kernel exported&unexported functions/global variable offset NT内核导出以及未导出函数+全局变量偏移速查
  ☆97Mar 30, 2023Updated 3 years ago
• timwhitez / Ortau

  View on GitHub
  一个用于隐藏C2的、开箱即用的反向代理服务器。旨在省去繁琐的配置Nginx服务的过程。
  ☆13Feb 14, 2022Updated 4 years ago
• SimonZhong2025 / Waste-Self-Rescue-Scheme

  View on GitHub
  废物自救项目！一起向光而行！！！
  ☆13May 7, 2022Updated 4 years ago
• TaoistBrickscarrier / WFPKit

  View on GitHub
  粗暴地枚举管理内核的WFP对象。 Manage kernel WFPs in a brutal way.
  ☆24Jan 14, 2018Updated 8 years ago
• canc3s / judas

  View on GitHub
  轻便的恶意反代
  ☆48May 29, 2021Updated 5 years ago
• wuba / Antenna

  View on GitHub
  Antenna是58同城安全团队打造的一款辅助安全从业人员验证网络中多种漏洞是否存在以及可利用性的工具。其基于带外应用安全测试(OAST)通过任务的形式，将不同漏洞场景检测能力通过插件的形式进行集合，通过与目标进行out-bind的数据通信方式进行辅助检测。
  ☆720Jun 6, 2023Updated 3 years ago
• rabbitmask / DruidCrack

  View on GitHub
  Druid 密文解密工具
  ☆137Dec 9, 2020Updated 5 years ago
• Deploy to Railway using AI coding agents - Free Credits Offer • Ad
  Use Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
• wecooperate / iMonitorSDK

  View on GitHub
  The world's most powerful System Activity Monitor Engine · 一款功能强大的终端行为采集防御开发套件 ~ 旨在帮助EDR、零信任、数据安全、审计管控等终端安全软件可以快速实现产品功能， 而不用关心底层…
  ☆378Feb 19, 2025Updated last year
• zodiacon / InfStudio

  View on GitHub
  INF Studio for easier working with driver installation files
  ☆40Nov 11, 2023Updated 2 years ago
• huoji120 / ai-webshell-detect

  View on GitHub
  机器学习检测webshell
  ☆69Jun 19, 2021Updated 5 years ago
• sreeharshabandi / Captain

  View on GitHub
  Process Creation, Image Load and Thread Creation Notification
  ☆12Sep 15, 2023Updated 3 years ago
• D0Gshuang / ShellcodeLoader_stager

  View on GitHub
  ☆20Aug 10, 2022Updated 4 years ago
• burpheart / cybertagger

  View on GitHub
  高性能WEB指纹识别打标工具
  ☆29Feb 4, 2023Updated 3 years ago
• h0li3 / mpengine_diskus

  View on GitHub
  参考taviso的代码逆向一下mpengine.dll
  ☆22Jun 30, 2022Updated 4 years ago