Coldfire

ColdFire II Golang マルウェア開発フレームワーク 目次 目次 はじめに インストール 含まれる関数の種類 要件 免責事項 ライセンス はじめに ColdFire II は、Golang でのマルウェアおよびセキュリティインフラ開発に役立つ様々なメソッドを提供します。 ほとんどの関数は Linux と Windows の両方のオペレーティングシステムに対応しています。 インストール go get github.com/redcode-labs/Coldfire ドキュメント 近日公開予定 含まれる関数の種類（マルウェア開発向け） ロギング 補助機能 偵察 回避 管理...

MalDev

MalDev 嘿！欢迎来到我的仓库 : 我是Captain Magma，一个热衷于网络安全、恶意软件开发和分析的爱好者。 这个仓库的用途是管理我的恶意软件开发学习路径，我会随着学习进度更新笔记和代码。 我不是任何技术的原创作者，这里只是我对它们的实现。 !重要 我想澄清一下，我 绝对不是 专家，最多算个新手。所以请不要期待这个仓库会出现什么APT级别的恶意软件。 另外，这个仓库仅供教育目的使用。用这些代码不仅会让你立刻被抓，而且未经许可 对不属于你的系统这样做是违法的。 当前项目与进度 截至目前，这是一个不断增长的仓库，因此所有代码都会频繁更新以确保正常运行。...

maldev-for-dummies

Malware Development for Dummies In the age of EDR, red team operators cannot get away with using pre-compiled payloads anymore. As such, malware development is becoming a vital skill for any operator. Getting started with maldev may seem daunting, but is actually very easy. This workshop will sho...

maldev-for-dummies

ダミーのためのマルウェア開発 EDRの時代において、レッドチームのオペレーターは既にコンパイルされたペイロードを使い続けることはできません。そのため、マルウェア開発はあらゆるオペレーターにとって重要なスキルになりつつあります。maldevの開始は難しく思えるかもしれませんが、実際には非常に簡単です。このワークショップでは、始めるために必要なすべてを紹介します！ このリポジトリには、Hack in Paris 2022およびX33fcon 2023で開催された／開催予定の「MalDev for...

EGESPLOIT

EGESPLOIT EGESPLOITは、マルウェア開発のためのGo言語ライブラリです。meterpreter統合のためのいくつかのユニークな関数を備えています。 ドキュメント CalculateChecksumx : リバースHTTP/HTTPS meterpreter接続のためのx桁8ビットチェックサムを計算します。計算されたチェックサムを文字列として返します。 MeterpreterConType, Address :...

PMD

实战恶意软件开发 练习 1 - 环境搭建 1. 在虚拟机管理程序中设置一台 Windows 虚拟机。 a. 确保对基础安装创建快照。 2. 下载并安装 Visual Studio 2022 - https://visualstudio.microsoft.com/vs/ a. 安装时选择 Desktop development with C++ 工作负载 3. 下载并安装： DebugView++ - https://github.com/CobaltFusion/DebugViewPP PE Bear - https://github.com/hasherezade/pe-bear...

BlackSnufkin

🎯 个人资料概览 你终于发现了我的 GitHub 个人主页。 如果你觉得某些地方可以做得更好，欢迎随意克隆/复刻项目、提出 issue 或提交 PR。 阅读我的博客 获取文章与研究内容 —— 黑客愉快！ 😊 struct OffensiveOperator handle: String, role: String, specialties: Vec, baseofoperations: String, primarylanguages: Vec, impl OffensiveOperator fn new - Self Self handle:...

MalwareApiLibrary

MalwareApiLibrary：用于恶意软件开发的一组 API： StringManagementLib：管理字符串、字符串哈希等 WinApiManagementLib：替代 GetModuleHandle 和 GetProcAddress 函数 SyscallsManagementLib：运行 Hellsgate、TartarusGate、PerunsFart（目前）以解除对系统调用的挂钩 参考： VX-API 待办事项： 反调试库 载荷执行库 持久化库 修复任何错误 完成后清理整个项目 注意：在对代码进行小幅更新后，我不会更新 release...

VX-API

管理元: vx-underground | Twitterでフォローする Twitter | VXUG/samplesページでマルウェアサンプルをダウンロード VXUG/samples VX-API バージョン: 2.01.015 開発者: smellyvx VX-APIは、マルウェア開発を支援する悪意のある機能のコレクションです。このリポジトリ全体をクローンまたはダウンロードし、Visual Studioソリューションファイルを開いて機能やコンセプトを簡単に探索することをお勧めします。...

Step-by-Step Malware Development: Evading EDR from Loaders to the Kernel

These are the workshop materials for "Step-by-Step Malware Development: Evading EDR from Loaders to the Kernel", presented at DEF CON 34 and BSidesLV 2026. This workshop explores custom malware development, EDR Architecture and Evasion, C2 customization, and kernel-level techniques using Elastic...

Exploit.Malware-Development

No d...

FOMO in the SOC: Where AI Platforms like Claude Actually Fit

AI is moving incredibly fast, and every security leader is feeling the pressure to keep up. AI platforms like Claude, Codex and Cursor are already helping security teams write detections, investigate alerts, summarize incidents, and automate repetitive work. The conversation has evolved from...

Threat actor abuse of AI accelerates from tool to cyberattack surface

For the last year, one word has represented the conversation living at the intersection of AI and cybersecurity: speed. Speed matters, but it’s not the most important shift we are observing across the threat landscape today. Now, threat actors from nation states to cybercrime groups are embedding...

Threat actor abuse of AI accelerates from tool to cyberattack surface

For the last year, one word has represented the conversation living at the intersection of AI and cybersecurity: speed. Speed matters, but it’s not the most important shift we are observing across the threat landscape today. Now, threat actors from nation states to cybercrime groups are embedding...

Exploit for Out-of-bounds Read in Openssl

--- Cybersecurity Labs Portfolio This repository contain...

OpenAI Disrupts Russian, North Korean, and Chinese Hackers Misusing ChatGPT for Cyberattacks

OpenAI on Tuesday said it disrupted three activity clusters for misusing its ChatGPT artificial intelligence AI tool to facilitate malware development. This includes a Russian‑language threat actor, who is said to have used the chatbot to help develop and refine a remote access trojan RAT, a...

OpenAI Bans ChatGPT Accounts Used by Russian, Iranian, and Chinese Hacker Groups

OpenAI has revealed that it banned a set of ChatGPT accounts that were likely operated by Russian-speaking threat actors and two Chinese nation-state hacking groups to assist with malware development, social media automation, and research about U.S. satellite communications technologies, among...

OpenAI Bans ChatGPT Accounts Used by Russian, Iranian, and Chinese Hacker Groups

OpenAI has revealed that it banned a set of ChatGPT accounts that were likely operated by Russian-speaking threat actors and two Chinese nation-state hacking groups to assist with malware development, social media automation, and research about U.S. satellite communications technologies, among...

Mitigating Cyber Risk in the Age of Open-Weight LLMs: Policy Gaps and Technical Realities

Open-weight general-purpose AI GPAI models offer significant benefits but also introduce substantial cybersecurity risks, as demonstrated by the offensive capabilities of models like DeepSeek-R1 in evaluations such as MITRE's OCCULT. These publicly available models empower a wider range of actors...

Golden Chickens Deploy TerraStealerV2 to Steal Browser Credentials and Crypto Wallet Data

The threat actors known as Golden Chickens have been attributed to two new malware families dubbed TerraStealerV2 and TerraLogger, suggesting continued development efforts to fine-tune and diversify their arsenal. "TerraStealerV2 is designed to collect browser credentials, cryptocurrency wallet...