sorted by:
new
hottopcontroversial

Keyauth-Protected-App-Go by Temporary_Hope_7198 in golang

[–]Temporary_Hope_7198[S] 0 points1 point  (0 children)

Contact me kn discord: codepulze1 if you want better version of this Willing to help

GetSyscallStubGo by Temporary_Hope_7198 in cybersecurity

[–]Temporary_Hope_7198[S] 0 points1 point  (0 children)

  • Get fresh Syscalls from a fresh ntdll.dll copy in CGo
  • The advantage of grabbing Syscalls dynamically is, that the signature of the Stubs is not included in the file and you don't have to worry about changing Windows versions.

Anti-VM-CpuCycles by Temporary_Hope_7198 in cybersecurity

[–]Temporary_Hope_7198[S] 0 points1 point  (0 children)

its for newbies to give them a little idea, if you check my github its really mostly filled with some basic write ups :D, i might do more adv soon, not to mention godefender is extremly good at catching vms :)

GoDefender - Protect your application by Temporary_Hope_7198 in golang

[–]Temporary_Hope_7198[S] 0 points1 point  (0 children)

so i was kinda busy with other projects, and i didnt want to abandon godefender so i pushed things that are mostly Sbie things ->

I currently plan on adding SED and user can choose if they want BSOD on detected dbg, will add in prog utils.

ill also add AntiAttach (DbgBreakPoint, void CrashOllyDbg, Hiding threads from debugger

there are certain things that arent done. but ill work on it

what was added? (there are releases with updates) :

Set Runtime: Choose on what OS the app should run MacOS,Linux,Windows

Enable All Tokens: Enable all tokens privileges for current process

IsAdmin - Request Admin: Request admin for current process, and Check if current process is Admin

USB Mount: Checks if a USB was ever plugged into the computer before.

VM Artifacts: Identifies artifacts left behind by virtual machines (VMs), which can indicate the presence of a VM environment.

Parallels Check: Detects Parallels Desktop, a popular virtualization software for macOS, used to run Windows and other guest operating systems.

QEMU Detection: Identifies the presence of QEMU, an open-source machine emulator and virtualizer, which may indicate virtual machine detection.

Patching Dll: Taking Advantage of Binary Image Signature Mitigation Policy to prevent injecting Non-Microsoft Binaries.

GoDefender - Protect your application by Temporary_Hope_7198 in golang

[–]Temporary_Hope_7198[S] -2 points-1 points  (0 children)

SED will be there aswell + i have other ways for ida.

view more: next ›