Huoji's

DuckMemoryScan. 检测绝大部分所谓的内存免杀马

CobaltStrikeDetected. 40行代码检测到大部分CobaltStrike的shellcode

white_patch_detect. 通杀检测基于白文件patch黑代码的免杀技术的后门

APT_Step_Bear_Inject. 复现《EDR的梦魇：Storm-0978使用新型内核注入技术“Step Bear”》

MakeInfinityHookGreatAgain. 让Etwhook再次伟大! Make InfinityHook Great Again!

awesome_anti_virus_engine. about how to make a anti-virus engine

DuckSandboxDetect. 沙箱测试,测评国内常见沙箱的代码与结论

AV-Killer. Antivirus Killer

CowInjecter. 滥用cow机制进行全局注入

huoji_debuger. ayy debuger

numen. 简单安排一下 autochk.sys 这个rootkit

NetWatch. 威胁流量检测系统

Etw-Syscall. https://key08.com/index.php/2021/10/19/1375.html

ai-webshell-detect. 机器学习检测webshell

DuckSysEye. SysEye是一个window上的基于att&ck现代EDR设计思想的威胁响应工具.有效检测常见的未知威胁与已知威胁.防守方的利剑

cpu_duck. 关于intel和amd指令行为不一样这件事

goodeye. https://githacks.org/Shawick/goodeye.git

sleep_duck_eye. Stack integrity verification to Detect SleepMask or CallStack Spoofer

GpuzMaper. using gpuz to load driver

Heuristic_antivirus_engine_by_huoji. 基于UC的启发式杀毒引擎[还没做完]

mbnsc. 通过分析流量,快速检查手机是否被APT攻击

AI_Aimbot_Detecter. AI 检测FPS游戏中的微自瞄

EACReversing. Reversing EasyAntiCheat.

HandleMaster. Changes handle's access rights using DKOM with a vulnerable driver

csgo2_tiny_server_plugin_system. a server plugin system for cs2 server,power by lua

safe_duck. 一款linux下的安全产品目的是满足个人安全需求有SSH爆破防护和SYN攻击扫描防护功能,基于netfilter,

battleye. battleye shellcode

mash_hypervisor. mash hypervisor host pml4

Microsoft_Kernel_Memory_Leak. win32kbase!NtDCompositionCommitSynchronizationObject and win32kbase!NtGdiGetCertificate

infosec_chrome_ext. 安全人员小助手油猴插件

CSGO-AntiCheat-Demo-By-Huoji. CSGO AntiCheat Demo By HuoJi

BottlEye-1. BottlEye is a usermode emulator for the popular anti-cheat BattlEye

Huoji_Rust_Legacy_cheat. Fully featured Rust Legacy cheat by Huoji's

Win_Driver_Mouse_And_Key. 驱动模拟键鼠，支持64位，附代码

key08.com. web security tools source list from Hax Wiki

cs2_funny_trash_plugin. Lua

KernelHiddenExecute. Execute kernel code with page separation

RmEye. 戎码之眼是一个window上的基于att&ck模型的威胁监控工具.有效检测常见的未知威胁与已知威胁.防守方的利剑

supremacy. Supremacy Counter-Strike: Global Offensive cheat, by Interwebz. Good for learning, everything is commented. Open Source.

Monkeware-SelfLeak. Got scammed by a friend, that one selled my src and driver around the world, so i decided to post that source here.

traffic-duck. traffic duck

RWCTF21-VirtualBox-61-escape. 0day VirtualBox 6.1 Escape for RealWorld CTF 2020/2021

Kernel-Bridge. Windows kernel hacking framework, driver template, hypervisor and API written on C++

KDU. Kernel Driver Utility

csgo-webradar-client. A shitty web-based radar for Counter-Strike: Global Offensive

HackBrowserData. Decrypt passwords/cookies/history/bookmarks from the browser. 一款可全平台运行的浏览器数据导出解密工具。

APCHook. hooking KiUserApcDispatcher

CSGO_WeaponStickers. Weapon Stickers for CS:GO [SourceMod]

ExecutiveCallbackObjects. Research on Windows Kernel Executive Callback Objects

MiniVisorPkg. The research UEFI hypervisor that supports booting an operating system.

xunfeng. 巡风是一款适用于企业内网的漏洞快速应急，巡航扫描系统。

access. Access without a real handle

coh2_game_map_script. coh2 map script by huoji

cs2_skin_preview_web_page. cs2皮肤预览网站

stickrpghookeditedbytomson. C++

RustExtended_Leaked. RustExtended Leaked By Huoji's

wghostk_CTF. 幽灵网安CTF

ByePg. Defeating Patchguard universally for Windows 8, Windows 8.1 and all versions of Windows 10 regardless of HVCI