Simple header only library to change return address on current stack frame.
☆21Sep 4, 2016Updated 10 years ago
Alternatives and similar repositories for ReturnAddressHider
Users that are interested in ReturnAddressHider are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- windows create process with a dll load first time via LdrHook☆31Oct 21, 2016Updated 9 years ago
- Software Distribution Service☆12Jul 2, 2015Updated 11 years ago
- Obtain remote process cookies by performing a brute-force attack on ntdll.RtlDecodePointer using known pointer encodings.☆22May 31, 2017Updated 9 years ago
- Library for using direct system calls☆35Jan 30, 2025Updated last year
- ☆19Jul 20, 2015Updated 11 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- x64 manual mapper using inline syscalls☆10Jul 8, 2021Updated 5 years ago
- Code injection by hijacking threads in Windows 32-bit applications☆43Oct 3, 2018Updated 7 years ago
- Code Injector Using Code Caves☆15Jul 12, 2015Updated 11 years ago
- Automatically exported from code.google.com/p/windbgshark☆12Nov 3, 2015Updated 10 years ago
- Minimal Intervention and Software Transformation - PoC Packer designed for AV detection bypass☆18Nov 4, 2017Updated 8 years ago
- Easily hook WIN32 x64 functions☆18Feb 19, 2025Updated last year
- The dll that can hide itself and then delete itselft.☆33Mar 31, 2013Updated 13 years ago
- Notes my learning steps about Windows-NT☆23May 18, 2017Updated 9 years ago
- Program to leak anti-virus behaviour and such☆13Apr 18, 2019Updated 7 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- ☆11Nov 17, 2014Updated 11 years ago
- ☆84Dec 3, 2017Updated 8 years ago
- Kernel Hook X64☆25Oct 11, 2020Updated 5 years ago
- ☆101Oct 6, 2017Updated 8 years ago
- All Nt Syscall and W32k Syscall in one asm, include, and call it!☆58Nov 4, 2021Updated 4 years ago
- Branch based windows debugger☆22Jul 30, 2019Updated 7 years ago
- ☆35Oct 29, 2020Updated 5 years ago
- A tool to help malware analysts tell that the sample is injecting code into other process.☆79Aug 12, 2015Updated 11 years ago
- Wow64 syscall hook☆43May 28, 2017Updated 9 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- PoC for Bypassing UM Hooks By Bruteforcing Intel Syscalls☆39Nov 20, 2015Updated 10 years ago
- PoC for hiding PE exports☆67Dec 19, 2020Updated 5 years ago
- fork HoShiMin Avanguard☆20Sep 29, 2018Updated 7 years ago
- 管道监视器,类似于spyxx之类的东西,一般用于监视目标进程的系统调用.关键词:detours+piep☆24Feb 26, 2014Updated 12 years ago
- 🧶 The Win32 usermode threading library with UMS/fibers/threads support☆30Jul 1, 2019Updated 7 years ago
- 内核级ARK工具。☆60Aug 1, 2016Updated 10 years ago
- ☆34Jul 28, 2018Updated 8 years ago
- Modify process handle permissions☆60Nov 30, 2016Updated 9 years ago
- A cs 1.6 hack (MOD SPECIFIC) (Hide'n'Seek)☆15Sep 3, 2019Updated 7 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Analysing and defeating PatchGuard universally☆34Nov 4, 2020Updated 5 years ago
- Anti-virus engine in Windows using VC++ 6.0 and MFC. We applied windows multithreading in virus scan method and user interface. Using MFC…☆16Oct 21, 2016Updated 9 years ago
- network filter driver that control network send speed, based on windows tdi framework.☆30Feb 16, 2024Updated 2 years ago
- Kernel mode driver loader, injecting into the windows kernel, Rootkit. Driver injections.☆47Nov 9, 2014Updated 11 years ago
- Prototype of hijacking Windows driver dispatch routines in unmapped discardable sections☆57Mar 30, 2019Updated 7 years ago
- usermode standalone kernel interface☆111Jul 9, 2018Updated 8 years ago
- Simple driver loader for windows☆19May 22, 2020Updated 6 years ago