2850 matches found
CVE-2021-42694
CVE-2021-42694 This script implements a Homoglyph detection tool, primarily used to detect potential CVE-2021-42694 vulnerabilities in code. Let me explain its main functions in detail: Core Features: Detect homoglyph substitution attacks in code Scan identifiers such as variable names and functi...
Chimera
Chimera is a shiny and very hack-ish PowerShell obfuscation script designed to bypass AMSI and antivirus solutions. It digests malicious PS1's known to trigger AV and uses string substitution and variable concatenation to evade common detection signatures. Chimera was created for this write-up an...
NXcrypt
NXcrypt NXcrypt is a polymorphic 'python backdoors' crypter written in python by Hadi Mene h4d3s . The output is fully undetectable . NXcrypt can inject malicious python file into a normal file with multi-threading system . Run it with superuser's permissions . NXcrypt output is Fully undetectabl...
trueseeing
README trueseeing is a fast, accurate and resillient vulnerability scanner for iOS/Android apps. We operate on the Dalvik VM level for Android -- i.e. we don't care if the target app is obfuscated or not. Capability Currently we can: Automatically scan app for vulnerabilities, reporting in...
SPY-MASKER
SPY-MASKER π₯ SPY-MASKER It is a simple Python Script to hide phishing URL under a normal looking URL google.com or facebook.com. It can be integrated into Phishing tools to look the URL legit. βοΈ Legal Disclaimer: FOR EDUCATIONAL PURPOSES ONLY Usage of SPY-MASKER for attacking targets without prio...
powershell-backdoor-generator
/ DISCLAIMER: This program is intended for educational purposes only. By using this program, you agree that you understand the potential risks associated with its use. - This program should not be used on any system or network without proper authorization. Unauthorized use is strictly prohibited....
Lastenzug
LastenZug This project implements a Socka4a proxy based on websockets. The client component is implemented in C compiling down to fully position independent code PIC. During the compilation process, obfuscation is applied on assembly level by leveraging a second tool: SpiderPIC located in...
pe-sieve
Intro PE-sieve is a tool that helps to detect malware running on the system, as well as to collect the potentially malicious material for further analysis. Recognizes and dumps variety of implants within the scanned process: replaced/injected PEs, shellcodes, hooks, and other in-memory patches...
Yara-Rules
Yara Rules for: Aurora Stealer Bandit Stealer Ducktail Meduza Stealer MetaStealer Nitrogen PSWSTEALER RaccoonStealerv2 SolarMarker Vidar Stealer WhiteSnake Stealer SwaetRAT DanaBot FakeBat Ande Loader WorkersDevBackdoor Pure Logs Stealer PikaBot JinxLoader GaryStealer Illyrian Stealer PureCrypter...
udpack
UDPack UDPack is an extensible generic UDP packet obfuscator. The purpose of this application is to sit in the path of a UDP data stream, and obfuscate, deobfuscate or otherwise modify the packets. Python 3.4 or above is required, since this script uses the asyncio library. Using the latest Pytho...
crypter
Crypter This Crypter is written in python 3, which can be used to obfusticate, encrypt the python source code to bypass AntiVirus. Also Capable to Bypass VM such as VirtualBox, VMware, Sandboxie. Uses AES-256 bit Encryption & Base64 Encoding to Encrypt the Source Code for Twice. 3 Powerfull Metho...
awesome-game-security
awesome-game-security If you find that some links are not working, you can simply replace the username with gmh5225. Or you can send an issue for me. Show respect to all the projects below, perfect works of art π«‘ NeverC & NeverD β Your Compiler & Decoder for the AI Era As AI agents increasingly...
Bin-Finder
Description This tool looks for either the processes that have a certain binary loaded or the processes that don't. This is useful in the following scenarios: It allows to detect processes where an specific EDR/AV dll is not loaded. This could lead to EDR's exception detection. It allows to obtai...
zeek-xor-exe-plugin
================= Corelight::PEXOR Zeek plugin to detect and decrypt XOR-obfuscated Windows EXEs. The key used to XOR the file will be automatically discovered and used to XOR the file back to the original Window's executable. Once the file is deobfucated, it is passed back into the file analysis...
dataset
π CySecBench: Generative AI-based CyberSecurity-focused Prompt Dataset for Benchmarking Large Language Models π‘οΈ The largest and most comprehensive Generative AI-based CyberSecurity-focused Dataset for Benchmarking Large Language Models π Overview The CySecBench paper offers: π― A cutting-edge...
VehApiResolve
VehApiResolve Inspired by Dridex Loader's 32 bit API obfuscation. How does this work? We setup an exception handler. AddVectoredExceptionHandler CALLFIRST, ApiResolverHandler ; This exception handler will only handle exception's thrown as EXCEPTIONBREAKPOINT. When it is thrown by us, we're able t...
TopazTerminator
TopazTerminator F, Another driver got burned.. I was gatekeeping wsftprm.sys driver for a while ; but since someone posted a public POC, I'm ungatekeeping it. We all know it'll get added to the driver blocklist soon, so here's my implementation for the same β in C This project exploits the...
recaptcha
Description This repository contains a technical analysis of Google's antibot reCAPTCHA focusing on: Payload Structure and Values Fingerprinting Techniques Obfuscation Techniques Anti-debugging/Tampering Techniques Virtual Machines Contact Discord: @grecaptcha Telegram: @lyxlobyx Obfuscation...
msynth
msynth Author: Tim Blazytko and Moritz Schloegel msynth is a code deobfuscation framework to simplify Mixed Boolean-Arithmetic MBA expressions. Given a pre-computed simplification oracle, it walks over a complex expression represented as an abstract syntax tree AST and tries to simplify subtrees...
XorStringsNET
XorStringsNET A tool for simple and quick XOR based string encryption of .NET binaries XORStrings implements a simple XOR based cipher, I call RXOR. RXOR does not only encrypt the string but also reverses its character order. Each string is encrypted with a unique key. The arguments used by the...