Broihon / ProcessInfo
A class to gather information about a process, its threads and modules.
☆24Updated 5 years ago
Alternatives and similar repositories for ProcessInfo:
Users that are interested in ProcessInfo are comparing it to the libraries listed below
- Small class to parse debug info from PEs, download their respective PDBs from the Microsoft Public Symbol Server and calculate RVAs of fu…☆44Updated 2 years ago
- Remote memory library in C++17.☆31Updated 6 years ago
- ☆48Updated 6 years ago
- Analysing and defeating PatchGuard universally☆34Updated 4 years ago
- x64 assembler library☆31Updated 10 months ago
- Injector with kernel power☆16Updated 4 years ago
- Some crazy PE executables protection kernel driver☆18Updated 4 years ago
- Simple library to handle PE files loading, relocating, get/set data, ..., in addition to process handling☆32Updated 5 years ago
- a driver to enumerate registered pnp callbacks for a particular interface class based on reversal of IoRegisterPlugPlayNotification☆11Updated last year
- Driver Loader/BE Bypass/Win Malware(lol)☆34Updated 5 years ago
- Windows Console Monitor☆33Updated 5 years ago
- Intraceptor intercept Windows NT API calls and redirect them to a kernel driver to bypass process/threads handle protections.☆29Updated 2 years ago
- An example code of CiGetCertPublisherName☆14Updated 3 years ago
- x64 injector using LoadLibrary made in assembler (MASM)☆26Updated 6 years ago
- Static library and headers for linking your software with ntdll.dll☆32Updated 5 years ago
- Detour library (x64 and x86 compatible)☆12Updated 4 years ago
- A packed & protected Module Loader and more, for 64-bit Windows☆29Updated 4 years ago
- Walks the Process' VAD list to grab the PTE's corresponding to a usermode virtual address, all to get the physical address☆24Updated 3 years ago
- Small project to generate fake DLLs based on an executable's import table☆23Updated 4 years ago
- Abusing RtlAdjustPrivilege and NtSetInformationProcess to cause a BSOD from usermode☆17Updated 2 years ago
- Example of hijacking system calls via function pointer tables☆31Updated 3 years ago
- A reflexive driver loader to bypass Windows DSE (featuring a custom PE loader)☆41Updated 6 years ago
- ☆17Updated 4 years ago
- Bypasses for Windows kernel callbacks PatchGuard protection☆43Updated 3 years ago
- A library with four different methods to execute shellcode in a process☆24Updated 5 years ago
- search for a driver/dll module that has a wanted section bigger than the size of your image☆19Updated 3 years ago
- Ready-to-use headers for Windows Kernel SSDT indices☆11Updated 5 years ago
- Small class to help perform syscalls.☆21Updated last year
- simply manual map any system image☆17Updated 4 years ago
- ☆24Updated 6 years ago