Add 15 English archive descriptions for security repos

Co-authored-by: gmh5225.eth <gmh5225@users.noreply.github.com>
2026-06-21 13:56:22 +00:00 · 2026-02-24 15:53:32 +00:00
parent f9a61a793f
commit b4f7641e93
15 changed files with 15 additions and 0 deletions
@@ -0,0 +1 @@
+This project is a universal Frida script for bypassing common Android app security checks without app-specific customization. It focuses on root detection and SSL pinning bypasses by hooking Java and native verification paths used by popular libraries. The implementation is written in JavaScript for Frida and is designed to work across a wide range of Android versions. It is mainly used in authorized mobile security testing and reverse engineering workflows.
@@ -0,0 +1 @@
+This project is a Windows kernel and user-mode proof of concept that communicates through registry callbacks. It demonstrates registering a callback through a jump gadget in a legitimate module so a manually mapped driver can receive commands. The C and C++ code implements operations such as virtual memory read and write, protected memory patching, process base lookup, and heartbeat checks. It is primarily a reference for kernel communication and anti-cheat evasion research in controlled environments.
@@ -0,0 +1 @@
+This project is an IDA Pro plugin that improves cross-reference navigation through a dockable viewer panel. It lists function xrefs in real time, supports click-to-jump navigation, and provides hotkeys for fast movement between references. The plugin is written in Python with IDA APIs and PyQt, and adds filters for immediates, parameter counts, and binary signatures. It is intended for reverse engineering tasks such as game binary analysis and vulnerability research.
@@ -0,0 +1 @@
+This project is an educational Windows BYOVD proof of concept that abuses a vulnerable signed driver to terminate selected security processes. It documents reverse engineering of the driver interface, including device naming, IOCTL selection, and required input buffer structure. The C implementation automates driver deployment, target process enumeration, repeated termination attempts, and cleanup on exit. It is aimed at authorized red-team style research on defensive product resilience and kernel attack surface.
@@ -0,0 +1 @@
+This project is an educational BYOVD toolkit that exposes kernel read and write primitives on Windows through a vulnerable driver. It contains multiple C proof-of-concept tools for changing process protection levels, editing tokens, disabling ETW telemetry, removing kernel callbacks and minifilters, and modifying DSE state. The tooling resolves kernel offsets and symbols, then performs privileged memory operations through IOCTL-based communication. It is designed for authorized kernel security research and for studying anti-cheat or EDR hardening gaps.
@@ -0,0 +1 @@
+This project is a kernel-mode DLL injection framework for Windows that targets processes during early startup stages. It supports callback-based triggering through process creation or image load notifications and demonstrates hooking ntdll loader routines with position-independent shellcode. It also includes an APC-based injection path from kernel mode for early user-mode execution timing. The codebase is written in C++ and is used for advanced process injection research in controlled security testing.
@@ -0,0 +1 @@
+This project is a C++ implementation of virtual machine detection logic derived from a machine learning model. Python scripts use scikit-learn to train and tune a decision tree classifier, then the resulting rules are translated into native C++ checks. Based on the detection outcome, the sample can execute alternate behaviors such as shellcode execution or self-removal. It is intended for research on sandbox awareness techniques and automation-assisted malware analysis concepts.
@@ -0,0 +1 @@
+This project is a practical lab for reproducing and studying the Android binder use-after-free vulnerability CVE-2019-2215. It provides environment setup documentation, kernel source preparation, patching steps, and emulator guidance for controlled experiments. The lab also covers privilege escalation analysis and fuzzing workflows with tools such as GDB scripts, syzkaller, and AFL++. It is targeted at mobile kernel security researchers learning vulnerability validation and exploitation methodology.
@@ -0,0 +1 @@
+This project is a research collection focused on Windows executive callback objects and their runtime behavior. It combines technical notes with C-based kernel proof-of-concept samples that register, inspect, and analyze callback activity. The material spans multiple callback families across networking, system state, boot flow, and security-related components. It is mainly useful for Windows internals research, telemetry visibility studies, and anti-cheat or EDR-oriented analysis.
@@ -0,0 +1 @@
+This project is a Windows kernel research proof of concept exploring alternate system call handler mechanics. It explains handler registration limits, dispatch conditions, and how thread debug flags influence which callback path is executed. The implementation includes C code and experiments around trap frame usage and process information calls needed to enable monitoring. It is aimed at low-level security researchers studying syscall interception behavior and related stability constraints.
@@ -0,0 +1 @@
+This project is a headless IDA Pro analysis assistant that extracts strings and related pseudocode from binaries. It is implemented in Rust with idalib bindings and decompilation helpers to process targets supported by Hex-Rays. Output is organized into directories where each string maps to decompiled functions that reference it, making triage easier at scale. It is intended for reverse engineers and vulnerability researchers who need fast static analysis pipelines.
@@ -0,0 +1 @@
+This project is a collection of Frida instrumentation scripts for dynamic analysis across mobile and desktop platforms. It includes tracing and enumeration helpers for iOS, Android, and Linux, along with reusable snippets for common runtime hook scenarios. The scripts are written in JavaScript for Frida and cover tasks such as method tracing, class discovery, and bypass-oriented experimentation. It is primarily used by reverse engineers and application security testers during live runtime analysis.
@@ -0,0 +1 @@
+This project is an AI-assisted WinDbg extension that can answer debugging questions and run debugger commands automatically. It supports multiple model providers, persistent conversation context, command execution with explanations, and decompilation-oriented assistance. The C++ codebase also exposes HTTP and MCP style interfaces with a companion CLI for external tool integration. It is designed for crash triage, exploit debugging, and advanced Windows security analysis workflows.
@@ -0,0 +1 @@
+This project is a header-only C++ memory manipulation library for Windows applications. It provides typed read and write helpers with pointer validation, optional exception handling, and optional logging to reduce unsafe memory access failures. It also includes pattern scanning utilities and wrappers for calling functions with common calling conventions. It is useful for reverse engineering tools, game memory research, and other low-level debugging tasks.
@@ -0,0 +1 @@
+This project is a Windows kernel proof of concept for manually mapping a driver into a discarded section of a legitimate driver image. It demonstrates creating a system thread after boot while attempting to avoid immediate PatchGuard-triggered detection. The implementation is centered on C-based driver development with supporting loader and structure code. It is intended for advanced kernel stealth loading experiments in authorized anti-cheat and security research environments.
				`@@ -0,0 +1 @@`
				`This project is a universal Frida script for bypassing common Android app security checks without app-specific customization. It focuses on root detection and SSL pinning bypasses by hooking Java and native verification paths used by popular libraries. The implementation is written in JavaScript for Frida and is designed to work across a wide range of Android versions. It is mainly used in authorized mobile security testing and reverse engineering workflows.`
				`@@ -0,0 +1 @@`
				This project is a Windows kernel and user-mode proof of concept that communicates through registry callbacks. It demonstrates registering a callback through a jump gadget in a legitimate module so a manually mapped driver can receive commands. The C and C++ code implements operations such as virtual memory read and write, protected memory patching, process base lookup, and heartbeat checks. It is primarily a reference for kernel communication and anti-cheat evasion research in controlled environments.
				`@@ -0,0 +1 @@`
				`This project is an IDA Pro plugin that improves cross-reference navigation through a dockable viewer panel. It lists function xrefs in real time, supports click-to-jump navigation, and provides hotkeys for fast movement between references. The plugin is written in Python with IDA APIs and PyQt, and adds filters for immediates, parameter counts, and binary signatures. It is intended for reverse engineering tasks such as game binary analysis and vulnerability research.`
				`@@ -0,0 +1 @@`
				This project is an educational Windows BYOVD proof of concept that abuses a vulnerable signed driver to terminate selected security processes. It documents reverse engineering of the driver interface, including device naming, IOCTL selection, and required input buffer structure. The C implementation automates driver deployment, target process enumeration, repeated termination attempts, and cleanup on exit. It is aimed at authorized red-team style research on defensive product resilience and kernel attack surface.
				`@@ -0,0 +1 @@`
				This project is an educational BYOVD toolkit that exposes kernel read and write primitives on Windows through a vulnerable driver. It contains multiple C proof-of-concept tools for changing process protection levels, editing tokens, disabling ETW telemetry, removing kernel callbacks and minifilters, and modifying DSE state. The tooling resolves kernel offsets and symbols, then performs privileged memory operations through IOCTL-based communication. It is designed for authorized kernel security research and for studying anti-cheat or EDR hardening gaps.
				`@@ -0,0 +1 @@`
				This project is a kernel-mode DLL injection framework for Windows that targets processes during early startup stages. It supports callback-based triggering through process creation or image load notifications and demonstrates hooking ntdll loader routines with position-independent shellcode. It also includes an APC-based injection path from kernel mode for early user-mode execution timing. The codebase is written in C++ and is used for advanced process injection research in controlled security testing.
				`@@ -0,0 +1 @@`
				`This project is a C++ implementation of virtual machine detection logic derived from a machine learning model. Python scripts use scikit-learn to train and tune a decision tree classifier, then the resulting rules are translated into native C++ checks. Based on the detection outcome, the sample can execute alternate behaviors such as shellcode execution or self-removal. It is intended for research on sandbox awareness techniques and automation-assisted malware analysis concepts.`
				`@@ -0,0 +1 @@`
				This project is a practical lab for reproducing and studying the Android binder use-after-free vulnerability CVE-2019-2215. It provides environment setup documentation, kernel source preparation, patching steps, and emulator guidance for controlled experiments. The lab also covers privilege escalation analysis and fuzzing workflows with tools such as GDB scripts, syzkaller, and AFL++. It is targeted at mobile kernel security researchers learning vulnerability validation and exploitation methodology.
				`@@ -0,0 +1 @@`
				`This project is a research collection focused on Windows executive callback objects and their runtime behavior. It combines technical notes with C-based kernel proof-of-concept samples that register, inspect, and analyze callback activity. The material spans multiple callback families across networking, system state, boot flow, and security-related components. It is mainly useful for Windows internals research, telemetry visibility studies, and anti-cheat or EDR-oriented analysis.`
				`@@ -0,0 +1 @@`
				`This project is a Windows kernel research proof of concept exploring alternate system call handler mechanics. It explains handler registration limits, dispatch conditions, and how thread debug flags influence which callback path is executed. The implementation includes C code and experiments around trap frame usage and process information calls needed to enable monitoring. It is aimed at low-level security researchers studying syscall interception behavior and related stability constraints.`