0xRick / PE-Parser

Related projects ⓘ

Alternatives and complementary repositories for PE-Parser

• hasherezade / shellc_encoder
  Standalone Metasploit-like XOR encoder for shellcode
  ☆46Updated 6 months ago
• ikermit / 11Syscalls
  Windows 11 Syscall table. Ready to use in direct syscall. Actively maintained.
  ☆19Updated 2 years ago
• jbaines-r7 / dellicious
  Enabled / Disable LSA Protection via BYOVD
  ☆62Updated 2 years ago
• zodiacon / MalDevWorkshopWebinar
  Demo from the Malware Analysis and Development Webinar
  ☆19Updated 7 months ago
• xalicex / Get-DLL-and-Function-Addresses
  GetModuleHandle (via PEB) and GetProcAddress (via EAT) like
  ☆32Updated 2 years ago
• zodiacon / winnativeapibooksamples
  Samples from my book Windows Native API programming
  ☆57Updated 4 months ago
• NtQuerySystemInformation / NlsCodeInjectionThroughRegistry
  Dll injection through code page id modification in registry. Based on jonas lykk research
  ☆117Updated last year
• Dump-GUY / sc2pe
  Simple dotnet Native AOT app that uses AsmResolver to convert shellcode to PE
  ☆64Updated last year
• LethalSnake1337 / PE-Loader-exercise
  A simple PE loader.
  ☆25Updated last year
• RedTeamOperations / VEH-PoC
  ☆106Updated last year
• whokilleddb / A-Study-in-Obfuscation
  A Study in Obfuscation: Analyzing the effect of various techniques to bypass AV engines
  ☆41Updated 2 years ago
• accidentalrebel / shcode2exe
  Compile shellcode into an exe file from Windows or Linux.
  ☆58Updated 3 years ago
• irql / CVE-2021-31728
  vulnerability in zam64.sys, zam32.sys allowing ring 0 code execution. CVE-2021-31727 and CVE-2021-31728 public reference.
  ☆89Updated 3 years ago
• forrest-orr / ExploitDev
  Various tools, PoCs and experiments related to my blog at https://www.forrest-orr.net/
  ☆35Updated 3 years ago
• hasherezade / libpeconv_tpl
  A ready-made template for a project based on libpeconv.
  ☆41Updated last month
• Cobalt-Strike / ProxyDLLExample
  code for the Proxy DLL example blog post
  ☆58Updated 3 years ago
• realoriginal / bootdoor
  An initial proof of concept of a bootkit based on Cr4sh's DMABackdoorBoot
  ☆59Updated last year
• LloydLabs / process-enumeration-stealth
  ☆76Updated 2 months ago
• AzAgarampur / PsForge
  Process Hollowing demonstration & explanation
  ☆32Updated 3 years ago
• 0vercl0k / inject
  Yet another Windows DLL injector.
  ☆38Updated 3 years ago
• d35ha / ProcessHide
  ☆63Updated 2 years ago
• EgeBalci / crc32_api
  Assembly API block that uses CRC32 for resolving Windows API function addresses
  ☆17Updated last year
• Idov31 / UdpInspector
  Listing UDP connections with remote address without sniffing.
  ☆30Updated last year
• dr4k0nia / XorStringsNET
  Easy XOR string encryption for NET based binaries
  ☆132Updated last year
• jonaslyk / temp
  ☆65Updated last year
• alfarom256 / MCP-PoC
  Minifilter Callback Patching Proof-of-Concept
  ☆62Updated 2 years ago
• ReCryptLLC / CVE-2022-42045
  ☆37Updated last year
• RITRedteam / nosferatu
  Windows NTLM Authentication Backdoor
  ☆14Updated 2 years ago
• Hagrid29 / herpaderply_hollowing
  Herpaderply Hollowing - a PE injection technique, hybrid between Process Hollowing and Process Herpaderping
  ☆45Updated 2 years ago
• knight0x07 / BumbleCrypt
  A Bumblebee-inspired Crypter
  ☆80Updated last year