Dreg
Dreg
anticuckoo
A tool to detect and crash Cuckoo Sandbox
cgaty
Hooking the GDT - Installing a Call Gate. POC for Rootkit Arsenal Book Second Edition (version 2022)
DbgChild
Debug Child Process Tool (auto attach)
enyelkm
LKM rootkit for Linux x86 with the 2.6 kernel. It inserts salts inside system_call and sysenter_entry.
evilmass_at90usbkey2
evil mass storage *AT90USBKEY2 (poc-malware-tool for offline system)
ida_bochs_windows
Helper script for Windows kernel debugging with IDA Pro on native Bochs debugger (including PDB symbols)
ida_vmware_windows_gdb
Helper script for Windows kernel debugging with IDA Pro on VMware + GDB stub (including PDB symbols)
lsrootkit
Rootkit Detector for UNIX
shellex
C-shellcode to hex converter, handy tool for paste & execute shellcodes in IDA PRO, gdb, windbg, radare2, ollydbg, x64dbg, immunity debugger & 010 editor
phook
Full DLL Hooking, phrack 65