0x1c1101 / zombie_asmLinks
C++ Assembler with Built-in Mutation Engine
☆25Updated 3 months ago
Alternatives and similar repositories for zombie_asm
Users that are interested in zombie_asm are comparing it to the libraries listed below
Sorting:
- Create stealthy, inline, EPT-like hooks using SMAP and SMEP☆59Updated last year
- Using the peculiar behaviour of the VPGATHER instructions to determine if an address will fault before it is truly accessed. All done in …☆36Updated last week
- x86-64 Automated test data generator☆26Updated 4 months ago
- Me fockin' pe protector☆45Updated 3 years ago
- Simple anti-instrumentation with EFLAGS.AC☆18Updated 8 months ago
- Generate a PDB file given the old PDB file and an address mapping☆51Updated 4 months ago
- Header-only C++ library for producing PE files.☆35Updated 2 years ago
- ntoskrnl .data hooks for UM-KM communication☆51Updated last year
- A demonstration of hooking into the VMProtect-2 virtual machine☆23Updated 2 years ago
- ☆36Updated last year
- Collection of Cheat dumps for Research and Detection.☆16Updated 4 months ago
- Runtime Hyper-V Hijacking with DDMA☆67Updated 4 months ago
- Compileable POC of namazso's x64 return address spoofer.☆50Updated 5 years ago
- Windows PDB parser for kernel-mode environment.☆103Updated 6 months ago
- Proof-of-concept game using VBS enclaves to protect itself from cheating☆47Updated last year
- intel vt-x type 2 hypervisor☆60Updated 8 months ago
- Interprocess communication via a covert timing channel☆26Updated last month
- Binary rewriter for 64-bit PE files.☆90Updated last year
- kASLR bypass technique on Intel CPUs.☆32Updated 7 months ago
- vm_str.hpp is a header only string obfuscator.☆75Updated 3 months ago
- ZeroImport is a lightweight and easy to use C++ library for Windows Kernel Drivers. It allows you to hide any import in your kernel drive…☆50Updated 2 years ago
- A Windows PE packer for executables (x64) with LZMA compression and with full TLS (Thread Local Storage) support.☆90Updated last month
- Find out how to bypass HVCI (or not). My own research on Microsoft Warbird (specifically in clipsp.sys)☆80Updated last month
- Disk based DMA for ATA and SCSI☆36Updated 2 years ago
- Elevate arbitrary MSR writes to kernel execution.☆42Updated 2 years ago
- Kernel ReClassEx☆65Updated 2 years ago
- A simple way to spoof return addresses using an exception handler☆43Updated 3 years ago
- ☆29Updated last year
- Port of zentool to Windows☆26Updated 9 months ago
- CMake template for a basic EFI application/bootkit. This library is header-only, there is no EDK2 runtime!).☆79Updated 3 years ago