gargoyle
jlospinoso/gargoyleHistorical Windows temporal memory-state research artifact for studying time-bound memory observations, validation limits, and defensive visibility.
binary-analysisdefensive-toolsmalware-analysis+3
917
jlospinoso/gargoyleHistorical Windows temporal memory-state research artifact for studying time-bound memory observations, validation limits, and defensive visibility.
elbraino/awesome-blackhat-arsenalCurated collection of cybersecurity tools featured in Black Hat Arsenal events.
bb1nfosec/information-security-tasksCurated infosec knowledge base of practitioner notes, methodologies, and daily-updated CVE, news, and tool digests organized by offensive, defensive,…
fareedfauzi/mantisMulti-Sources Analysis & Threat Intelligence Search
happyhackingspace/claude-code-backdoor-checkRead-only scanner for the backdoored Claude Code 2.1.313 extension (Cursor marketplace, Oct 2026): SSH key, persistence, reverse tunnel. macOS +…
phpatch/weblogcheckerFree access-log compromise analyzer: webshell interactions, exploitation patterns and brute-force bursts in your Apache/nginx logs - severity,…
s12cybersecurity/whatpatchguardprotectsReference of all kernel structures, routines, and MSRs monitored by PatchGuard (KPP) on Windows.
kaandemir993/nwh-stealer-analysis-fileless-bun-runtime-execution-clipboard-image-theft-cloud-c2-aws-r2-Static analysis and payload extraction of NWH Stealer. Features deep dive into fileless execution via Bun JavaScript Runtime, in-memory clipboard…
1llu50ry/aegisSingle-header C++20 software protection SDK with polymorphic VM code virtualization, compile-time MBA and string obfuscation, 25+ crypto primitives,…
hunterdii/tryhackme-roadmapHello, aspiring hackers! 🕵️♂️ Here’s a list of 500+ Free TryHackMe rooms to kickstart your cybersecurity journey. These rooms are absolutely free,…
habanada/nativemirrorNative Delphi implementation of PE-sieve functionality with a reusable library, CLI, and PE-sieve-compatible DLL for HollowsHunter integration.
kaandemir993/vidar-stealer-chrome-injection-malicious-js-targeting-google-reddit-sessions-analysisReverse engineering Vidar Stealer: From obfuscated memory strings to Chrome process injection, malicious JS execution, and active session hijacking…
gmh5225/no-access-protection-x86It encrypts the text section and set the protection to NO_ACCESS.
raj3shp/malscoreMaliciousness scoring for Linux commands
silentisvox/syscallrevenantClean Indirect Syscalls with Syscall Tampering.
yasindce1998/barzakhRing -4 to Ring 0: offense-defense firmware research platform. We build the bootkits, then we catch them. Closed-loop. Zero trust in silicon.
gmh5225/memory-relocallocC proof-of-concept that locates code caves in the .reloc section of mapped DLLs to allocate and execute small shellcode, replacing typical memory…
maximilianfeix/hexveroKnow what changed inside your Electron release: diff two builds for IPC, preload, windows, fuses and hosts, with file:line. CLI, CI gate, MCP server.