malware-unicorn/GoPEInjection

Stars
158
Rank 235,803 (Top 5 %)
Language
Go
License
MIT License
Created about 3 years ago
Updated about 3 years ago

malware-unicorn/GoPEInjection

malware-unicorn

There are no reviews yet. Be the first to send feedback to the community and the maintainers!

Golang PE injection on windows

GoPEInjection

Golang PE injection on windows

See: https://malwareunicorn.org/workshops/peinjection.html

Based on Cryptowall's PE injection technique. Reference hash: 546817e28100127124a0368050cbe6ecd1ea7a64c0bdfbef14823bb77404c42b

How to build:

GOOS=windows GOARCH=386 go build .

rusty-memory-loadlibrary

Load DLLs from memory with rust

MacOS_VBA_Macro

Example VBA Macro for MacOS Mojave

malware-unicorn.github.io

BeatSaberCTFChallenge

Created a CTF challenge based on Beat Saber

pteroioctl-hook

A driver to implement IOCTL hooking

MFTparser

Encase Script to parse harddrive for MFT data

xori-og

macho_shellcode_extractor

extracts shellcode from a nasm compile macho binary

xorbyte_decoder

Used to decode xor in zepto ransomware

maliciousaf

keybase-bot-api

This library uses the RPC system from keybase to communicate to the local keybase server for bots to use

apptest

matryoshka

CTF Challenge 2019