Skip to content
View ccoskrnl's full-sized avatar

Block or report ccoskrnl

Block user

Prevent this user from interacting with your repositories and sending you notifications. Learn more about blocking users.

You must be logged in to block users.

Maximum 250 characters. Please don’t include any personal information such as legal names or email addresses. Markdown is supported. This note will only be visible to you.
Report abuse

Contact GitHub support about this user’s behavior. Learn more about reporting abuse.

Report abuse
ccoskrnl/README.md

你好,我是 城城

Blog

关于我

目前从事逆向分析工作。我的主要兴趣是操作系统、Hypervisor、编译优化、程序分析等偏底层一些的软件和相关的安全机制。

  • ccOS: 尝试写过的UEFI引导的x64架构操作系统内核,不过目前已经不做相关的开发了
  • cc-pass-python: 研究编译器IR优化时写的demo,比如实现了一些控制流分析、SSA、数据流分析、常量传播和符号执行等算法。
  • ReflectiveDLL: 学习别人的反射DLL项目,自己做了一些优化。
  • cc-hypervisor: 还在学习中,打算往调试器、监控分析方向开发。

欢迎交流底层技术、安全对抗、编译原理以及任何有趣的话题。

博客与联系

📝 技术笔记:ccoskrnl.github.io/notes
🐙 GitHub:ccoskrnl
💬 最好通过 Issue 或邮件交流


Hi, I'm chengcheng

Blog

About Me

I currently work in reverse engineering. My main interests lie in low-level software and related security mechanisms, such as operating systems, hypervisors, compiler optimizations, and program analysis.

  • ccOS: A UEFI-booted x64 operating system kernel I once attempted to write, though I'm no longer actively developing it.
  • cc-pass-python: Demos I wrote while studying compiler IR optimizations, implementing algorithms like control flow analysis, SSA, data flow analysis, constant propagation, and symbolic execution.
  • ReflectiveDLL: A project where I studied others' reflective DLL implementations and made some optimizations of my own.
  • cc-hypervisor: Still under study, with plans to develop it towards debugging and monitoring.

I'm always open to discussing low-level technology, security countermeasures, compiler principles, and any other interesting topics.

Blog & Contact

📝 Technical Notes: ccoskrnl.github.io/notes
🐙 GitHub: ccoskrnl
💬 Best way to reach me is via Issue or email.

Pinned Loading

  1. ccOS ccOS Public

    [工作原因,已不再进行开发] x64架构操作系统项目,支持UEFI、APIC、多核激活、基于Windows的内存管理方案等

    C 12

  2. cc-pass-python cc-pass-python Public

    一个编译器后端分析优化框架的demo,支持控制流分析,SSA,数据流分析,SCCP,符号执行等

    Python 4

  3. cc-hypervisor cc-hypervisor Public

    Hypervisor Demo

    C

  4. ReflectiveDLL ReflectiveDLL Public

    高度隐蔽持久化的反射DLL,深度驻留在内存当中,可作为恶意代码的监视器

    C++ 5

  5. code-injector code-injector Public

    Rust实现的反射DLL注入器,加入了一些常规免杀技术,可以有效的绕过EDR的静态/动态分析

    Rust 4