huoji120/DuckSysEye external links

---

GitHub - View repository

GitHub.dev - Open in online code editor

Star history - Growth chart over time

deps.dev - Dependencies and security vulnerabilities

Gitingest - Export source code for LLM usage

Repomix - Export source code for LLM usage

uithub - Export source code for LLM usage

Close

huoji120/DuckSysEye

Readme badge preview -

If you own this repo, copy the snippet below and add it to your README.md

---

Copy

[![RelatedRepos](https://img.shields.io/badge/related-repos-yellow)](https://relatedrepos.com/gh/huoji120/DuckSysEye)

Close

huoji120 / DuckSysEyeView on GitHubMore

• External links
• Readme badge

SysEye是一个window上的基于att&ck现代EDR设计思想的威胁响应工具.有效检测常见的未知威胁与已知威胁.防守方的利剑

☆63Aug 23, 2022Updated 3 years ago

Alternatives and similar repositories for DuckSysEye

Users that are interested in DuckSysEye are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.

• DarkDuckDudes / duckcafe

  View on GitHub
  鸭鸭咖啡馆主要项目
  ☆16Sep 29, 2022Updated 3 years ago
• CitrusIce / ksc4cpp

  View on GitHub
  ksc4cpp is a shellcode framework for windows kernel based on C++
  ☆21Feb 10, 2023Updated 3 years ago
• huoji120 / numen

  View on GitHub
  简单安排一下 autochk.sys 这个rootkit
  ☆73Mar 7, 2023Updated 3 years ago
• RoomaSec / RmEye

  View on GitHub
  戎码之眼是一个window上的基于att&ck模型的威胁监控工具.有效检测常见的未知威胁与已知威胁.防守方的利剑
  ☆536Oct 25, 2023Updated 2 years ago
• therealdreg / pdbdump_bochs

  View on GitHub
  Dump PDB Symbols including support for Bochs Debugging Format (with wine support)
  ☆14Aug 11, 2023Updated 2 years ago
• GPUs on demand by Runpod - Special Offer Available • Ad
  Run AI, ML, and HPC workloads on powerful cloud GPUs—without limits or wasted spend. Deploy GPUs in under a minute and pay by the second.
• huoji120 / Microsoft_Kernel_Memory_Leak

  View on GitHub
  win32kbase!NtDCompositionCommitSynchronizationObject and win32kbase!NtGdiGetCertificate
  ☆16Oct 14, 2021Updated 4 years ago
• huoji120 / Etw-Syscall

  View on GitHub
  https://key08.com/index.php/2021/10/19/1375.html
  ☆72May 11, 2022Updated 3 years ago
• F6JO / GoFileBinder

  View on GitHub
  golang免杀捆绑器
  ☆22Apr 7, 2022Updated 4 years ago
• huoji120 / DuckMemoryScan

  View on GitHub
  检测绝大部分所谓的内存免杀马
  ☆733Sep 15, 2022Updated 3 years ago
• huoji120 / CobaltStrikeDetected

  View on GitHub
  40行代码检测到大部分CobaltStrike的shellcode
  ☆293Jul 25, 2021Updated 4 years ago
• huoji120 / MakeInfinityHookGreatAgain

  View on GitHub
  让Etwhook再次伟大! Make InfinityHook Great Again!
  ☆147Jun 24, 2021Updated 4 years ago
• RoomaSec / RmTools

  View on GitHub
  蓝队应急工具
  ☆542Jun 10, 2024Updated last year
• r00tSe7en / ShadowlessFeet

  View on GitHub
  无影脚 - 命令行下的日志文件处理工具
  ☆50Nov 15, 2022Updated 3 years ago
• XRSec / Emergency-Response

  View on GitHub
  红队应急响应工具（支持麒麟系统）
  ☆54Aug 13, 2025Updated 8 months ago
• Managed hosting for WordPress and PHP on Cloudways • Ad
  Managed hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
• wudicainiao / cve-2021-4034

  View on GitHub
  CVE-2021-4034 for single commcand
  ☆10May 31, 2022Updated 3 years ago
• jas502n / coremail-checkwkpass

  View on GitHub
  enc8 密码碰撞脚本
  ☆33Jan 31, 2023Updated 3 years ago
• conjojo / Microsoft_Exchange_Server_SSRF_CVE-2021-26855

  View on GitHub
  Microsoft Exchange Server SSRF漏洞(CVE-2021-26855)
  ☆36Mar 6, 2021Updated 5 years ago
• huoji120 / DuckSandboxDetect

  View on GitHub
  沙箱测试,测评国内常见沙箱的代码与结论
  ☆107Jul 3, 2021Updated 4 years ago
• huoji120 / mash_hypervisor

  View on GitHub
  mash hypervisor host pml4
  ☆17Jun 22, 2022Updated 3 years ago
• TeamT5 / ShimcacheParser

  View on GitHub
  A simple parser(library) which extracts shimcache data from windows.
  ☆15May 20, 2019Updated 6 years ago
• rabbitmask / DruidCrack

  View on GitHub
  Druid 密文解密工具
  ☆137Dec 9, 2020Updated 5 years ago
• SimonZhong2025 / Waste-Self-Rescue-Scheme

  View on GitHub
  废物自救项目！一起向光而行！！！
  ☆11May 7, 2022Updated 3 years ago
• wecooperate / iMonitorSDK

  View on GitHub
  The world's most powerful System Activity Monitor Engine · 一款功能强大的终端行为采集防御开发套件 ~ 旨在帮助EDR、零信任、数据安全、审计管控等终端安全软件可以快速实现产品功能， 而不用关心底层…
  ☆378Feb 19, 2025Updated last year
• Wordpress hosting with auto-scaling - Free Trial • Ad
  Fully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
• ExpLangcn / HKTools

  View on GitHub
  一款辅助安全研发在日常工作中渗透测试、安全研究、安全开发等工作的工具！
  ☆13Nov 20, 2023Updated 2 years ago
• djhons / tcpUploadFile

  View on GitHub
  通过gzip一边压缩一边使用tcp上传文件夹。
  ☆17Nov 12, 2022Updated 3 years ago
• Ridter / tshtun

  View on GitHub
  Py写的tsh的流量加解密过程。
  ☆28Aug 15, 2022Updated 3 years ago
• h0li3 / mpengine_diskus

  View on GitHub
  参考taviso的代码逆向一下mpengine.dll
  ☆20Jun 30, 2022Updated 3 years ago
• A-Normal-User / Pretend_HideVirtualMemory

  View on GitHub
  利用物理内存映射，实现虚拟内存的伪隐藏
  ☆86Sep 15, 2022Updated 3 years ago
• smallzhong / hide_execute_memory

  View on GitHub
  隐藏可执行内存
  ☆268Apr 27, 2025Updated 11 months ago
• Kara-4search / HookDetection_CSharp

  View on GitHub
  HookDetection
  ☆45Sep 3, 2021Updated 4 years ago
• DragonQuestHero / WindowsSyscallsEx

  View on GitHub
  Quick check of NT kernel exported&unexported functions/global variable offset NT内核导出以及未导出函数+全局变量偏移速查
  ☆98Mar 30, 2023Updated 3 years ago
• wuba / Antenna

  View on GitHub
  Antenna是58同城安全团队打造的一款辅助安全从业人员验证网络中多种漏洞是否存在以及可利用性的工具。其基于带外应用安全测试(OAST)通过任务的形式，将不同漏洞场景检测能力通过插件的形式进行集合，通过与目标进行out-bind的数据通信方式进行辅助检测。
  ☆722Jun 6, 2023Updated 2 years ago
• Managed hosting for WordPress and PHP on Cloudways • Ad
  Managed hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
• timwhitez / Ortau

  View on GitHub
  一个用于隐藏C2的、开箱即用的反向代理服务器。旨在省去繁琐的配置Nginx服务的过程。
  ☆13Feb 14, 2022Updated 4 years ago
• woodpecker-appstore / xmldecoder-payload-generator

  View on GitHub
  Java XMLDecoder payload generator
  ☆16Jul 27, 2021Updated 4 years ago
• D0pam1ne705 / Direct-NtCreateUserProcess

  View on GitHub
  Call NtCreateUserProcess directly as normal.
  ☆77May 17, 2022Updated 3 years ago
• huoji120 / ai-webshell-detect

  View on GitHub
  机器学习检测webshell
  ☆69Jun 19, 2021Updated 4 years ago
• theSecHunter / Hades-Windows

  View on GitHub
  Hades HIDS/HIPS for Windows
  ☆310Oct 10, 2025Updated 6 months ago
• A-Normal-User / NtSocket_NtClient_NtServer

  View on GitHub
  Using NtCreateFile and NtDeviceIoControlFile to realize the function of winsock（利用NtCreateFile和NtDeviceIoControlFile 实现winsock的功能）
  ☆128Sep 9, 2022Updated 3 years ago
• zodiacon / InfStudio

  View on GitHub
  INF Studio for easier working with driver installation files
  ☆39Nov 11, 2023Updated 2 years ago