malwareunicorn

GoPEInjection. Golang PE injection on windows

rusty-memory-loadlibrary. Load DLLs from memory with rust

MacOS_VBA_Macro. Example VBA Macro for MacOS Mojave

malware-unicorn.github.io. HTML

BeatSaberCTFChallenge. Created a CTF challenge based on Beat Saber

shellcode_tools. Miscellaneous tools written in Python, mostly centered around shellcodes.

pteroioctl-hook. A driver to implement IOCTL hooking

macho_shellcode_extractor. extracts shellcode from a nasm compile macho binary

xori-og. Rust

MFTparser. Encase Script to parse harddrive for MFT data

maliciousaf. ctf repo

xorbyte_decoder. Used to decode xor in zepto ransomware

xori. Xori is an automation-ready disassembly and static analysis library for PE32, 32+ and shellcode

zerokit. Zerokit (GAPZ rootkit)

keybase-bot-api. This library uses the RPC system from keybase to communicate to the local keybase server for bots to use

ghidra. Ghidra is a software reverse engineering (SRE) framework

go-keybase-chat-bot. golang exploration keybase chat JSON API

managed-bots. Keybase managed bots

polarbearrepo. C++

apptest.

windows-dll-hijacking. Project for identifying executables and DLLs vulnerable to relative path DLL hijacking.

RemoteTemplateInjectionDemo. Demo files for remote template injection of .dotm files into .docx

matryoshka. CTF Challenge 2019

Updated-Carbanak-Source-with-Plugins. https://twitter.com/itsreallynick/status/1120410950430089224

binee. Binee: binary emulation environment

pdbview. dump all available information from PDBs

keybase-gitea-bot. Based on Keybase's Gitlab bot. Notifications in Keybase Teams for Gitea, using webhooks.

gate. A specialized 2D game library

radamsa-rs. Radamsa rust bindings