C5Hackr / Segment-Encryption
☆21Updated 4 months ago
Alternatives and similar repositories for Segment-Encryption:
Users that are interested in Segment-Encryption are comparing it to the libraries listed below
- A windows kernel mode driver that spoofs serial numbers when mapped and executes a malicious payload (FULLY from kernel!!!)☆31Updated 4 months ago
- WinApi Patcher is a straightforward tool leveraging windows API hooking to patch and modify certain behaviors in a targeted environment.☆41Updated 5 months ago
- ☆23Updated 4 months ago
- Evilbytecode-Gate resolves Windows System Service Numbers (SSNs) using two methods: analyzing the Guard CF Table in ntdll.dll and parsing…☆18Updated 2 weeks ago
- 🗡️ A multi-user malleable C2 framework targeting Windows. Written in C++ and Python☆43Updated 11 months ago
- Research into removing strings & API call references at compile-time (Anti-Analysis)☆24Updated 8 months ago
- Spoof the return address of any function call.☆7Updated 7 months ago
- Ransomware written in go, encrypt - decrypt.☆16Updated 7 months ago
- ☆41Updated 2 weeks ago
- Near compile-time string obfuscation for Golang☆13Updated last year
- (EDR) Dll Unhooking = kernel32.dll, kernelbase.dll, ntdll.dll, user32.dll, apphelp.dll, msvcrt.dll.☆18Updated 6 months ago
- ☆36Updated this week
- https://github.com/janoglezcampos/c_syscalls with the ASM rewritten by myself for Visual Studio's Compiler.☆30Updated 7 months ago
- Fud Runpe Av Evasion / All Av Bypass☆32Updated last year
- codecave hook reverse engineering toolkit.☆37Updated last year
- C/C++ antidebugging library for Windows☆17Updated last month
- Header only library for obfuscation import winapi functions.☆39Updated last week
- havoc kaine plugin to mitigate PAGE_GUARD protected image headers using JOP gadgets☆26Updated 6 months ago
- Allows for same-file KernelMode function execution using Encrypted addresses of Functions☆28Updated 4 months ago
- user-mode Rootkit☆103Updated 2 years ago
- Next gen process injection technique☆44Updated 4 years ago
- POC Ring3 Windows Rootkit (x86 / x64) - Hide processes and files☆54Updated last year
- windows rootkit☆58Updated 9 months ago
- This exploit use PEB walk technique to resolve API calls dynamically, obfuscate all API calls to perform process injection.☆16Updated 6 months ago
- Using ioctl major function swaps to "spoof" the ARP table☆15Updated 5 months ago
- 💻 Windows 10 Kernel-mode rootkit☆31Updated 2 years ago
- Measures average CPU cycles for the CPUID instruction to detect if the code is running in a VM by comparing against a threshold.☆19Updated 6 months ago
- PE Header (.rdata,.data,.text) obsfucation☆36Updated 2 years ago