Awesome GitHub RepositoriesProcess Memory Access

WeFlow is a local client extension for the WhatsApp messaging protocol. It functions as a suite of tools for decrypting media, managing chat history, and extending the core capabilities of the messaging client. The project is distinguished by its ability to block message recalls, preventing the remote deletion of sent messages to maintain a permanent record of conversations. It also includes a local messaging API that exposes internal chat capabilities via an HTTP service for use with external automation scripts and third-party tools. The software provides a chat analytics dashboard for gene

VirtualApp is an Android application virtualization engine and user-space sandbox that enables the execution of applications within an isolated environment. It allows for the running of multiple independent instances of the same application on a single device and supports private application installation without requiring system-level root access. The project features a comprehensive hooking framework for intercepting Java and native layer functions to modify application behavior. It includes tools for hardware simulation to spoof device models and system information, as well as a non-root pr

Objection is a dynamic instrumentation framework and runtime exploration toolkit for mobile application security analysis. It provides a command-line interface to interact with the memory and state of iOS and Android applications during active execution, serving as a toolkit for runtime analysis and security testing. The project distinguishes itself by providing specialized capabilities to bypass common mobile security controls, including SSL pinning, biometric authentication, and root or jailbreak detection. It enables the extraction of sensitive credentials and data from secure storage syst

LOLBAS is a curated database and knowledge base of signed Windows binaries that can be misused to bypass security restrictions and execute unauthorized code. It serves as a technical registry that maps trusted system files to their functional capabilities and the offensive tactics they enable. The project distinguishes itself by providing a capability-driven indexing system and a tactics registry that relates legitimate binary functionality to known security evasion techniques. It includes an association layer that links specific system binaries to attack patterns and tactical objectives, pro

gops सक्रिय Go एप्लिकेशनों की रनटाइम स्थिति की निगरानी, प्रोफाइलिंग और प्रबंधन के लिए एक कमांड-लाइन डायग्नोस्टिक टूलसेट है। यह एक रनटाइम डायग्नोस्टिक टूल के रूप में कार्य करता है जो मेमोरी का विश्लेषण करने, प्रदर्शन को प्रोफाइल करने और चल रही प्रक्रियाओं के स्वास्थ्य की निगरानी करने के लिए एक केंद्रित इंटरफेस प्रदान करता है। यह टूल विशेष यूटिलिटीज का एक सेट प्रदान करता है जिसमें CPU और हीप प्रोफाइल कैप्चर करने के लिए एक प्रदर्शन प्रोफाइलर, लीक की पहचान करने और गारबेज कलेक्शन को ट्रिगर करने के लिए एक मेमोरी एनालाइज़र, और चल रही बाइनरीज़ की खोज करने और प्रक्रिया पदानुक्रमों की कल्पना करने के लिए एक प्रोसेस मॉनिटर शामिल है। यह प्रोजेक्ट डायग्नोस्टिक क्षमताओं की एक विस्तृत श्रृंखला को कवर करता है, जिसमें रनटाइम निष्पादन ट्रेसिंग, स्टैक ट्रेस कैप्चर और संसाधन उपयोग सैंपलिंग शामिल है। इसमें प्रक्रिया मेटाडेटा निरीक्षण, बाइनरी पथ रिज़ॉल्यूशन, और थ्रेड काउंट और मेमोरी आँकड़ों जैसे रनटाइम मेट्रिक्स की निगरानी के लिए सिस्टम यूटिलिटीज भी शामिल हैं।

frida-dexdump is an Android memory forensics tool that recovers Dalvik Executable (DEX) files from running application processes using the Frida dynamic instrumentation framework. It functions as a Frida-based runtime analyzer and DEX memory dumper, capable of extracting obfuscated or packed DEX files without modifying the Android system. The tool distinguishes itself through its ability to repair corrupted or missing DEX file headers using heuristic analysis and fuzzy matching techniques. It employs fuzzy boundary detection to identify DEX file boundaries in memory even when headers are dama

WindowsInternals is a CPU stress testing tool and a research project designed to illustrate the underlying mechanisms of the Windows kernel and system architecture. It functions as an educational resource for studying how the Windows operating system manages internal processes and hardware resources. The project focuses on Windows OS research and system resource profiling. It provides a collection of source code and examples used to reveal the internal workings of the operating system and monitor how it handles high processing demands to identify stability issues and performance bottlenecks.