trib0r3 trib0r3

## download-latest-release.ps1
# Download latest dotnet/codeformatter release from github

$repo = "dotnet/codeformatter"
$file = "CodeFormatter.zip"

$releases = "https://api.github.com/repos/$repo/releases"

Write-Host Determining latest release
$tag = (Invoke-WebRequest $releases | ConvertFrom-Json)[0].tag_name

## resources.md

      
              1 file
            
          
              168 forks
            
          
              3 comments
            
          
              630 stars
            
          
                muff-in
                / resources.md
            
            
              Last active
              July 18, 2024 01:30
            
              
                A curated list of Assembly Language / Reversing / Malware Analysis / Game Hacking-resources
              
          
    Assembly Language / Reversing / Malware Analysis / Game Hacking -resources


⭐Assembly Language

Modern x64 Assembly

https://www.youtube.com/playlist?list=PLKK11Ligqitg9MOX3-0tFT1Rmh3uJp7kA

  
## youtube-dl-pluralsight.md

      
              1 file
            
          
              1 fork
            
          
              0 comments
            
          
              2 stars
            
          
                mavericksrini
                / youtube-dl-pluralsight.md
            
            
              Created
              August 9, 2020 04:07
                — forked from quangnd-pgvn/youtube-dl-pluralsight.md
            
              
                Download Pluralsight videos
              
          
    Download Plural Sight videos

Software required:
youtube-dl
After installation and putting the youtube-dl in PATH
youtube-dl --username YOUR_USERNAME --password YOUR_PASSWORD --all-subs https://app.pluralsight.com/library/courses/javascript-development-environment -o "~/video/%(playlist)s/%(chapter_number)s. %(chapter)s/%(playlist_index)s. %(title)s.%(ext)s" --sleep-interval 10


## hookdetector.vba
Private Declare PtrSafe Function GetModuleHandleA Lib "KERNEL32" (ByVal lpModuleName As String) As LongPtr
Private Declare PtrSafe Function GetProcAddress Lib "KERNEL32" (ByVal hModule As LongPtr, ByVal lpProcName As String) As LongPtr
Private Declare PtrSafe Sub CopyMemory Lib "KERNEL32" Alias "RtlMoveMemory" (ByVal Destination As LongPtr, ByVal Source As LongPtr, ByVal Length As Long)

'VBA Macro that detects hooks made by EDRs
'PoC By Juan Manuel Fernandez (@TheXC3LL) based on a post from SpecterOps (https://posts.specterops.io/adventures-in-dynamic-evasion-1fe0bac57aa)


Public Function checkHook(ByVal target As String, hModule As LongPtr) As Integer
    Dim address As LongPtr
	# Download latest dotnet/codeformatter release from github

	$repo = "dotnet/codeformatter"
	$file = "CodeFormatter.zip"

	$releases = "https://api.github.com/repos/$repo/releases"

	Write-Host Determining latest release
	$tag = (Invoke-WebRequest $releases \| ConvertFrom-Json)[0].tag_name
	Private Declare PtrSafe Function GetModuleHandleA Lib "KERNEL32" (ByVal lpModuleName As String) As LongPtr
	Private Declare PtrSafe Function GetProcAddress Lib "KERNEL32" (ByVal hModule As LongPtr, ByVal lpProcName As String) As LongPtr
	Private Declare PtrSafe Sub CopyMemory Lib "KERNEL32" Alias "RtlMoveMemory" (ByVal Destination As LongPtr, ByVal Source As LongPtr, ByVal Length As Long)

	'VBA Macro that detects hooks made by EDRs
	'PoC By Juan Manuel Fernandez (@TheXC3LL) based on a post from SpecterOps (https://posts.specterops.io/adventures-in-dynamic-evasion-1fe0bac57aa)


	Public Function checkHook(ByVal target As String, hModule As LongPtr) As Integer
	Dim address As LongPtr