BinaryAdventure / NotepadHook

Related projects: ⓘ

• biesigrr / pe-loader
  ☆53Updated this week
• Cr4sh / PTBypass-PoC
  Bypassing code hooks detection in modern anti-rootkits via building faked PTE entries.
  ☆72Updated 13 years ago
• Biswa96 / PDBDownloader
  Standalone program to download PDB Symbol files for debugging without WDK
  ☆71Updated 5 years ago
• ionescu007 / r0ak
  ☆28Updated 5 years ago
• Rat431 / ColdHide
  (DEPRECATED) A simple anti-anti debug library for Windows
  ☆29Updated 4 years ago
• Teq2 / SEH-Over-VEH
  Implementation of a dispatcher for Structured Exceptions inside a Vectored Exception Handler
  ☆36Updated 4 years ago
• SouhailHammou / KernelSymbolsHelper
  Retrieve pointers to undocumented kernel functions and offsets to members within undocumented structures to use in your driver by using t…
  ☆52Updated 5 years ago
• ajkhoury / Errata1337
  ☆64Updated 3 years ago
• mrexodia / MiniDumpPlugin
  Simple x64dbg plugin to save a full memory dump
  ☆49Updated last year
• Chigusa0w0 / AsusDriversPrivEscala
  ☆29Updated this week
• t3ssellate / unmapper
  An automatic tool for fixing dumped PE files
  ☆42Updated 4 years ago
• changeofpace / PE-Header-Dump-Utilities
  This x64dbg plugin adds several commands for dumping PE header information by address.
  ☆60Updated 7 years ago
• jnastarot / cleancall
  Library for using direct system calls
  ☆35Updated 4 years ago
• lldre / handle_exploration
  Figuring out the cause of a handle downgrade
  ☆24Updated last year
• n00bk1t / n00bk1t
  ☆52Updated 10 years ago
• sgabe / SymlinkProtect
  File system minifilter driver for Windows to block symbolic link attacks.
  ☆51Updated 3 years ago
• nblog / Vm2Import
  fix vmprotect import function used unicorn-engine.
  ☆91Updated last year
• yardenshafir / SymlinkCallback
  A driver that hooks C: volume using symbolic link callback to track all FS access to the volume
  ☆100Updated 4 years ago
• bb107 / RtlWow64
  c++ implementation of windows heavens gate
  ☆54Updated 3 years ago
• SinaKarvandi / x64-Driver-Inline-Assembly
  This is a simple driver with x64 inline assembly
  ☆52Updated 4 years ago
• d366 / DarkMMap
  Manual PE image mapper
  ☆59Updated 11 years ago
• wbaby / win32k
  ☆79Updated this week
• kkent030315 / NtSymbol
  Resolve DOS MZ executable symbols at runtime
  ☆93Updated 2 years ago
• alfarom256 / drivers_and_shit
  ☆56Updated 2 years ago
• 0ffffffffh / system_call_hook_win10_1903
  This is the P.O.C source for hooking the system calls on Windows 10 (1903) using it's dynamic trace feature weakness
  ☆50Updated 5 years ago
• kernelm0de / RunPE-ProcessHollowing
  ☆48Updated this week
• edix / AlternativeCreateRemoteThread-public
  Load and unload a DLL into an remote process without using WriteProcessMemory ;)
  ☆16Updated 10 years ago
• repnz / windows-inspector
  A driver to intercept low level windows events
  ☆59Updated 4 years ago
• johnsonjason / Remote-Thread-Executor
  Code injection by hijacking threads in Windows 32-bit applications
  ☆42Updated 5 years ago
• cxxrev0to1dev / nb_obfuscator
  win32/x64 obfuscate framework
  ☆32Updated 5 years ago