Cybersecurity Libraries - Page 3

Threadless Process Injection using remote function hooking.

C# 467Updated: 2 y ago License: Permissive (MIT)

dll injection tool that implements various methods

C++ 465Updated: 2 y ago License: No License (No License)

Load/Inject .NET assemblies by; reusing the host (spawnto) process loaded CLR AppDomainManager, Stomping Loader/.NET assembly PE DOS headers, Unlinking .NET related modules, bypassing ETW+AMSI, avoiding EDR hooks via NT static syscalls (x64) and hiding imports by dynamically resolving APIs (hash).

C++ 464Updated: 2 y ago License: No License (No License)

Tools and packages that are used for countering forensic activities, including encryption, steganography, and anything that modify attributes. This all includes tools to work with anything in general that makes changes to a system for the purposes of hiding information.

HTML 460Updated: 2 y ago License: Proprietary (Proprietary)

Collect, Process, and Hunt with host based data from MacOS, Windows, and Linux

Shell 457Updated: 2 y ago License: Strong Copyleft (GPL-3.0)

The OWASP Java Encoder is a Java 1.5+ simple-to-use drop-in high-performance encoder class with no dependencies and little baggage. This project will help Java web developers defend against Cross Site Scripting!

Java 452Updated: 2 y ago License: Permissive (BSD-3-Clause)

A POC for the new injection technique, abusing windows fork API to evade EDRs. https://www.blackhat.com/eu-22/briefings/schedule/index.html#dirty-vanity-a-new-approach-to-code-injection--edr-bypass-28417

C 449Updated: 2 y ago License: No License (No License)

Various snippets created during malware analysis

Python 441Updated: 2 y ago License: No License (No License)

Python Scripts for Hacking .

Python 436Updated: 2 y ago License: No License (No License)

A tool for forensic file system reconstruction.

Python 436Updated: 2 y ago License: Strong Copyleft (GPL-3.0)

在Windows环境下的进程注入方法：远程线程注入、创建进程挂起注入、反射注入、APCInject、SetWindowHookEX注入

C 432Updated: 4 y ago License: No License (No License)

Quickly debug shellcode extracted during malware analysis

C 431Updated: 2 y ago License: Permissive (MIT)

DARKSURGEON is a Windows packer project to empower incident response, digital forensics, malware analysis, and network defense.

PowerShell 428Updated: 4 y ago License: Permissive (MIT)

DFIRTrack - The Incident Response Tracking Application

Python 421Updated: 2 y ago License: Proprietary (Proprietary)

UAC is a Live Response collection script for Incident Response that makes use of native binaries and tools to automate the collection of AIX, Android, ESXi, FreeBSD, Linux, macOS, NetBSD, NetScaler, OpenBSD and Solaris systems artifacts.

Shell 420Updated: 2 y ago License: Permissive (Apache-2.0)

The Secure Coding Dojo is a platform for delivering secure coding knowledge.

PHP 417Updated: 2 y ago License: Permissive (Apache-2.0)

OWASP Foundation main site repository

HTML 412Updated: 2 y ago License: Strong Copyleft (CC-BY-SA-4.0)

Remote forensics meta tool

Shell 412Updated: 2 y ago License: Strong Copyleft (GPL-2.0)

Advanced Game Hacking Library for C/C++, Rust and Python (Windows/Linux/FreeBSD) (Process/Memory Hacking) (Hooking/Detouring) (Cross Platform) (x86/x64/ARM/ARM64) (DLL/SO Injection) (Internal/External)

C 411Updated: 2 y ago License: Strong Copyleft (AGPL-3.0)

Easy-to-use live forensics toolbox for Linux endpoints

HTML 397Updated: 2 y ago License: Permissive (Apache-2.0)

Using Driver Global Injection dll, it can hide DLL modules

C++ 396Updated: 2 y ago License: No License (No License)

A series of programs demonstrating the basics of Memory Scanning, Api Hooking and DLL Injection. The high point is using Notepad.exe as a render target, and playing snake in a notepad window

C++ 391Updated: 2 y ago License: Permissive (MIT)

Repo for all the OWASP-SKF Docker lab examples

Python 375Updated: 2 y ago License: Strong Copyleft (AGPL-3.0)

Simple Dll injector loading from memory. Supports PE header and entry point erasure. Written in C99.

C 367Updated: 2 y ago License: Permissive (MIT)

Practical Windows Forensics Training

PowerShell 364Updated: 2 y ago License: Strong Copyleft (AGPL-3.0)

A Python RESTful API framework for online malware analysis and threat intelligence services.

Python 354Updated: 2 y ago License: Proprietary (Proprietary)

SAMM stands for Software Assurance Maturity Model.

JavaScript 354Updated: 4 y ago License: No License (No License)

Powershell Script to aid Incidence Response and Live Forensics | Bash Script for MacOS Live Forensics and Incidence Response

PowerShell 351Updated: 2 y ago License: No License (No License)

AmongUsMenu is a Cheat Menu for the popular Game Among Us.

C++ 347Updated: 2 y ago License: Strong Copyleft (GPL-3.0)

C# Based Universal API Unhooker

C# 344Updated: 2 y ago License: No License (No License)

Forensics tool for NTFS (parser, mft, bitlocker, deleted files)

C++ 339Updated: 2 y ago License: Permissive (MIT)

Black-Box Adversarial Attack on Public Face Recognition Systems

Python 338Updated: 4 y ago License: Strong Copyleft (GPL-3.0)

Volatility plugin for extracts configuration data of known malware

Python 335Updated: 4 y ago License: Proprietary (Proprietary)

Library for injecting a shared library into a Linux or Windows process

C 326Updated: 2 y ago License: Strong Copyleft (GPL-2.0)

Persisting in the Windows registry "invisibly"

C++ 325Updated: 2 y ago License: No License (No License)

Python 322Updated: 4 y ago License: Proprietary (Proprietary)

Watcher - Open Source Cybersecurity Threat Hunting Platform. Developed with Django & React JS.

Python 313Updated: 4 y ago License: Strong Copyleft (AGPL-3.0)

A tool which utilizes Shodan to detect vulnerable IoT devices.

Python 310Updated: 2 y ago License: Strong Copyleft (GPL-3.0)

Contains the definitions for the Windows Internal UserMode API from ntdll.dll, samlib.dll and winsta.dll.

C++ 302Updated: 2 y ago License: Permissive (MIT)

Inject C# code into a running process

C++ 302Updated: 4 y ago License: Permissive (BSD-2-Clause)

A set of tutorials about code injection for Windows.

C 300Updated: 2 y ago License: Permissive (MIT)

Digital forensic acquisition tool for Windows based incident response.

Python 298Updated: 2 y ago License: Permissive (Unlicense)

The Cold Disk Quick Response (CDQR) tool is a fast and easy to use forensic artifact parsing tool that works on disk images, mounted drives and extracted artifacts from Windows, Linux, MacOS, and Android devices

Python 296Updated: 4 y ago License: Strong Copyleft (GPL-3.0)

The analyzer behind https://npms.io

JavaScript 291Updated: 3 y ago License: Permissive (MIT)

Lovingly referred to as the Swiss Army Knife of PC gaming, Special K does a bit of everything.

C++ 282Updated: 2 y ago License: Strong Copyleft (GPL-3.0)

PowerLoaderEx - Advanced Code Injection Technique for x32 / x64

C++ 281Updated: 4 y ago License: No License (No License)

OWSAP Damn Vulnerable Web Sockets (DVWS) is a vulnerable web application which works on web sockets for client-server communication.

PHP 272Updated: 4 y ago License: Permissive (MIT)

VAC-proof 32bit DLL injector written in C++, using memory mapping and thread hijacking techniques

C++ 271Updated: 2 y ago License: Weak Copyleft (LGPL-3.0)

Some ways to inject a DLL into a alive process

C 268Updated: 4 y ago License: Permissive (MIT)

Cobalt Strike User-Defined Reflective Loader written in Assembly & C for advanced evasion capabilities.

C 267Updated: 4 y ago License: No License (No License)