Alternatives and similar repositories for Unlinking-Modules-From-The-PEB-Dll-Hiding-:

Users that are interested in Unlinking-Modules-From-The-PEB-Dll-Hiding- are comparing it to the libraries listed below

• emlinhax / DriverTimestampFaker
  Fake Timestamps of Driver Certificates while keeping validity.
  ☆17Updated 3 years ago
• opcode86 / SysCaller
  Single header library to simplify the usage of direct syscalls. x64/x86
  ☆11Updated 2 years ago
• masterpastaa / face-injector-v2
  working injector bp (BE EAC & VANGUARD)
  ☆4Updated 3 years ago
• zer0condition / CritBSOD
  Abusing RtlAdjustPrivilege and NtSetInformationProcess to cause a BSOD from usermode
  ☆17Updated 2 years ago
• andrew9382 / manual_mapping_dll_injector
  manual mapping injector
  ☆27Updated 3 years ago
• Deputation / syscall_extractor
  A C++ syscall ID extractor for Windows. Developed, debugged and tested on 20H2.
  ☆20Updated 3 years ago
• d35ha / DumpPE
  Dump mapped PE files from memory to the disk
  ☆19Updated 5 years ago
• alfarom256 / UserVAtoPhysical
  Walks the Process' VAD list to grab the PTE's corresponding to a usermode virtual address, all to get the physical address
  ☆24Updated 3 years ago
• dilibili / Hook_KiUserExceptionDispatcher
  R3劫持所有异常
  ☆15Updated 4 years ago
• Lima-X / Win32.Nebula
  A packed & protected Module Loader and more, for 64-bit Windows
  ☆29Updated 4 years ago
• wyyqyl / HookIAT
  ☆14Updated 12 years ago
• Broihon / ProcessInfo
  A class to gather information about a process, its threads and modules.
  ☆24Updated 5 years ago
• 0mWindyBug / PnpNotifyResearch
  a driver to enumerate registered pnp callbacks for a particular interface class based on reversal of IoRegisterPlugPlayNotification
  ☆11Updated last year
• MockbaTheBorg / RETSpoof
  RET / JMP RBX call spoofer
  ☆10Updated 5 years ago
• Anal-Repair / gigabyte_gdrv3_exploit
  Rust program for interfacing with the gigabyte driver to gain access to powerful primitives such as arbitrary kernel memcpy.
  ☆17Updated 2 years ago
• guidedhacking / GH_Syscall
  Small class to help perform syscalls.
  ☆21Updated last year
• DKingAlpha / SSDT-Index
  Ready-to-use headers for Windows Kernel SSDT indices
  ☆11Updated 5 years ago
• Lima-X / XOrCryptEx
  XOrCryptEx lightweight C Utility/Algorithm
  ☆11Updated 3 years ago
• muturikaranja / disable-threat-tracing
  Disable threat tracing from the kernel..
  ☆13Updated 3 years ago
• msmania / hk
  Injector with kernel power
  ☆16Updated 4 years ago
• BerkanYildiz / EasyNT
  Simplifies the Windows Kernel APIs by making the existing function easier to use, and extends them by creating functions that could possi…
  ☆26Updated 3 weeks ago
• kkent030315 / EvilHooker
  Function hooks in Windows NT Kernel
  ☆22Updated 4 years ago
• kkent030315 / anyelevate
  x64 Windows privilege elevation using anycall
  ☆21Updated 3 years ago
• h311d1n3r / LetsHook
  A Windows API hooking library !
  ☆31Updated 2 years ago
• MahmoudZohdy / Anti-Analysis-DebuggerInjection
  Anti-Analysis technique, trick the debugger by Hiding events from it.
  ☆19Updated 3 years ago
• d35ha / xPE
  Simple library to handle PE files loading, relocating, get/set data, ..., in addition to process handling
  ☆33Updated 5 years ago
• kkent030315 / libinject
  A dll injector static library for Win x64 processes with handle elevation supported
  ☆12Updated 4 years ago
• ByteWhite1x1 / PatchGuardResearch
  Bypassing kernel patch protection runtime
  ☆20Updated 2 years ago
• revsic / CodeInjection
  Code Injection technique written in cpp language
  ☆31Updated 7 years ago
• XShar / simple_mutate_pe_x86
  Мутация PE x86
  ☆15Updated 5 years ago