theSecHunter / Hades-LinuxLinks
Hades is a Host-Based Intrusion Detection System based on both eBPF(kernel) and netlink/cn_proc(userspace).
☆28Updated last year
Alternatives and similar repositories for Hades-Linux
Users that are interested in Hades-Linux are comparing it to the libraries listed below
Sorting:
- 一款linux下的安全产品目的是满足个人安全需求有SSH爆破防护和SYN攻击扫描防护功能,基于netfilter,☆23Updated 2 years ago
- 沙箱测试,测评国内常见沙箱的代码与结论☆106Updated 4 years ago
- 简单安 排一下 autochk.sys 这个rootkit☆73Updated 2 years ago
- SysEye是一个window上的基于att&ck现代EDR设计思想的威胁响应工具.有效检测常见的未知威胁与已知威胁.防守方的利剑☆63Updated 3 years ago
- CobaltStrikeDetect☆49Updated 7 months ago
- ☆37Updated 5 years ago
- Windows Defender VDM lua collections☆48Updated 3 years ago
- 40行代码检测到大部分CobaltStrike的shellcode☆293Updated 4 years ago
- ☆92Updated 4 years ago
- IDA Python script for generating Windows x86 shellcode with one click☆40Updated 2 years ago
- 利用图片隐写术来远程动态加载shellcode☆98Updated 3 years ago
- [windows]pe -> shellcode -> shellcodeLoader -> (pe2shellcode go on?)☆78Updated 4 years ago
- 复现《EDR的梦魇：Storm-0978使用新型内核注入技术“Step Bear”》☆161Updated last year
- 通杀检测基于白文件patch黑代码的免杀技术的后门☆181Updated last year
- 一个加壳工具☆62Updated 6 years ago
- UAC_wenpon☆49Updated 4 years ago
- A Blind EDR Project for Educational Purposes☆97Updated last year
- Windows CVE主防(HIPS/HIDS)☆56Updated 4 years ago
- 白文件扫描器 非公开☆29Updated 4 years ago
- 🔥开源跨平台轻量级病毒特征检测引擎。Open source cross-platform lightweight virus signature detection engine.👍👍👍☆53Updated 3 years ago
- 一些进程注入或者Shellcode注入的实例代码，用于练习和熟悉☆19Updated 3 years ago
- about how to make a anti-virus engine☆106Updated 8 months ago
- ☆70Updated last year
- Using DLL sideloading to hijack the exe main thread before starting it! 使用dll侧载在exe程序主线程启动之前劫持主线程。☆26Updated 6 months ago
- 大数字驱动逆向代码☆78Updated 2 years ago
- Beacon compiled using clang☆73Updated 3 years ago
- 过去写的一些Windows安全研究相关代码☆135Updated 7 years ago
- Remote Download and Memory Execute for shellcode framework☆96Updated 3 years ago
- windows黑客编程基础（C\C++）☆44Updated 6 years ago
- A tool that expands the size of the text section in a PE file without loss, supporting both 32-bit and 64-bit programs.☆41Updated last year