- https://www.vx-underground.org/archive.html
- https://www.vx-underground.org/windows.html
- https://doxygen.reactos.org/index.html
- https://modexp.wordpress.com/
- https://klezvirus.github.io/
- https://zerosum0x0.blogspot.com/
- https://www.binarly.io/posts/index.html
- https://0xdarkvortex.dev/blogs/
- https://cocomelonc.github.io/
allanp0e
/ All-Mal-Dev.md
Created
October 12, 2024 07:28
— forked from maxzxc0110/All-Mal-Dev.md
Malware Dev Reading List
allanp0e
/ create-msvcrt
Created
May 5, 2022 07:32
— forked from SolomonSklash/create-msvcrt
Creating msvcrt.lib
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| # On Windows, within a VS developer prompt | |
| # Dump the exports of msvcrt.dll | |
| dumpbin.exe /exports C:\Windows\System32\msvcrt.dll > msvcrt.txt | |
| # Copy msvcrt.txt to a Linux box | |
| # Convert the file to Unix line endings | |
| dos2unix msvcrt.txt |
allanp0e
/ NtMonitor.py
Created
April 30, 2022 12:37
— forked from matterpreter/NtMonitor.py
Frida script to spawn a process and monitor Native API calls
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| import frida | |
| import sys | |
| def on_message(message, data): | |
| if message['type'] == 'send': | |
| print(message['payload']) | |
| elif message['type'] == 'error': | |
| print(message['stack']) | |
| else: | |
| print(message) |