SHAREM is a shellcode analysis framework, capable of emulating more than 20,000 WinAPIs and virutally all Windows syscalls. It also contains its own custom disassembler, with many innovative featur…

companion to our book of the same name, ISBN: 9781394199884

eBPF implementation that runs on top of Windows

Remote Thread Detection with a Kernel Driver

WinVisor - A hypervisor-based emulator for Windows x64 user-mode executables using Windows Hypervisor Platform API

RTTI GUI Tool to dump Class information from msvc binaries, written in python 3 with tkinter

Collection of malware source code for a variety of platforms in an array of different programming languages.

Windows 11 and Windows 10 Activator

A True Instrumentable Binary Emulation Framework

A Compiler Writing Journey

🪅 Windows User Space Emulator

PE Viewer

Course materials for Modern Binary Exploitation by RPISEC

This is a repository of resource about Malware techniques

Example code for the book http://www.nostarch.com/gamehacking . PLEASE READ THE README

Pure Malware Development Resource Collections

A repository for learning various heap exploitation techniques.

AV/EDR Lab environment setup references to help in Malware development

Hardcore Debugging

Master programming by recreating your favorite technologies from scratch.

Tutorials for getting started with Pwntools

Exploit Development and Reverse Engineering with GDB & LLDB Made Easy

High Octane Triage Analysis

A comprehensive collection of cheatsheets for reverse engineering, binary analysis, and assembly programming tools. This repository serves as a one-stop reference for security researchers, reverse …

Offensive Software Exploitation Course

A guide that explains how programs transform from source code to executables. Deep dive into ELF format, linking processes, and binary optimization techniques. Perfect for systems programmers, C de…

All the deals for InfoSec related software/tools this Black Friday