Discover @K2 Open Source projects

@K2

K2

Stars
446
Global Rank 63,864 (Top 3 %)
Followers 156
Following 64
Registered almost 9 years ago
Most used languages

C++
37.5 %

C#
25.0 %

PowerShell
12.5 %

C
12.5 %

HTML
12.5 %
Location 🇺🇸 United States
Country Total Rank 16,104
Country Ranking

PowerShell
366

C++
1,182

C
2,479

C#
6,644

HTML
8,206

EhTrace

ATrace is a tool for tracing execution of binaries on Windows.

ADMMutate

Classic code from 1999+ I am fairly sure this is the first public polymorphic shellcode ever (best IMHO and others http://ids.cs.columbia.edu/sites/default/files/ccs07poly.pdf :) If I ever port this to 64 or implement a few other suggestions (sorry I lost ppc code version contributed) it will be orders of magnitude more difficult to spot, so I hope nobody uses signatures for anything (virus / malware scanners included).

Scripting

PS / Bash / Python / Other scripts For FUN!

LanguageBackdoors

Compiler exploits and exploitable non-obvious source code back doors.

HashLib

fork from http://hashlib.codeplex.com

Reloc

Transform dumped executable memory back into an identical match from disk. Use network or local database to de-locate relocated binaries and ensure a cryptographically secure hash match for code running on your legacy systems. A client tool that downloads relocation data for various PE files. This ensures when extracting data from memory dumps that you can match memory to disk files precisely.

CapstoneCore

CoreCLR 64bit Capstone bindings

HashServer

A Kestrel app server provides a just in time JitHash white list. The client is in powershell and can be used to test remote system memory for unknown code. Rendered doc's are here https://K2.github.io/HashServer/