ExiaHan

semgrep. Lightweight static analysis for many languages. Find bug variants with patterns that look like source code.

CVE-2022-42864. Proof-of-concept for the CVE-2022-42864 IOHIDFamily race condition

redteam-research. Collection of PoC and offensive techniques used by the BlackArrow Red Team

pypykatz. Mimikatz implementation in pure Python

SeeProxy. Golang reverse proxy with CobaltStrike malleable profile validation.

CallStackMasker. A PoC implementation for dynamically masking call stacks with timers.

quarkdown-vscode. Quarkdown vscode extension

CoreSymbootication.

MemProcFS-Analyzer. MemProcFS-Analyzer - Automated Forensic Analysis of Windows Memory Dumps for DFIR

Linux-Security-and-Hardening-Security-Guide. Linux Security and Hardening Security Guide

utls. Fork of the Go standard TLS library, providing low-level access to the ClientHello for mimicry purposes.

migen_litex_tutorials. Python

microsoft-ai-agents-for-beginners. 11 Lessons to Get Started Building AI Agents

FilelessPELoader. Loading Remote AES Encrypted PE in memory , Decrypted it and run it

Ackites-Nrfr. 🌍 免 Root 的 SIM 卡国家码修改工具 | 解决国际漫游时的兼容性问题，帮助使用海外 SIM 卡获得更好的本地化体验，解锁运营商限制，突破区域限制

shadow. A jailbreak detection bypass for modern iOS jailbreaks.

Awesome-BEC. Repository of attack and defensive information for Business Email Compromise investigations

powershell-backdoor-generator. Reverse backdoor written in PowerShell and obfuscated with Python. It generates payloads for popular hacking devices like Flipper Zero and Hak5 USB Rubber Ducky, and changes its signature after every build for evasion.

Clash.Meta. A rule-based tunnel in Go.

bytedance-lynx. Empower the Web community and invite more to build across platforms.

pixel-volte-patch. Rootless replacement for persist.dbg.volte_avail_ovr patch

requestly. 🚀 Most Popular developer tool for frontend developers & QAs to debug web and mobile applications. Redirect URL (Switch Environments), Modify Headers, Mock APIs, Modify Response, Insert Scripts & Report Bugs with debugging sessions.

book-reviews.

RedTeam-Tools. Tools and Techniques for Red Team / Penetration Testing

oatdump_plus. Extended oatdump from Android ART repo, to support class & method level dumps

exiahanLib. C

BlueTeam-Tools. Tools and Techniques for Blue Team / Incident Response

KernelSU. A Kernel based root solution for Android GKI

XPrivacy. XPrivacy - The ultimate, yet easy to use, privacy manager

MyEmacsConfig. Emacs Config for myself. Totally Dogefood:)

dynamic-load-apk. DL : dynamic load framework in android

android-dynamical-loading. Android projects of dynamically loading apk, which means that you can upgrade your Android apk without any re-installation.

secret-magpie-cli. Secret Magpie - Secret Detection Tool

rp. rp++ is a full-cpp written tool that aims to find ROP sequences in PE/Elf/Mach-O x86/x64 binaries. It is open-source and has been tested on several OS: Debian / Windows 8.1 / Mac OSX Lion (10.7.3). Moreover, it is x64 compatible and supports Intel syntax. Standalone executables can also be directly downloaded.

heap_detective. The simple way to detect heap memory pitfalls in C++ and C. Beta.

cdc-file-transfer. Tools for synching and streaming files from Windows to Linux

bindump4j. A portable utility to locate android binder service

Frida-Android-unpack. this unpack script for Android O and Android P

awesome-ida-x64-olly-plugin. A curated list of IDA x64DBG, Ghidra and OllyDBG plugins.

Inline-Execute-PE. Execute unmanaged Windows executables in CobaltStrike Beacons

Personal-Blocklist-not-by-Google-. Google製のChrome拡張機能「Personal Blocklist」の代替として作った拡張機能

APT_REPORT. Interesting apt report collection and some special ioc express

sigma. Main Rule Repository

FEX. A fast usermode x86 and x86-64 emulator for Arm64

ios10_keybag_clear. iPhone AppStore Tweak,AppStore Keybag and all cache file、Junk files cleanup.

anbox. C++