Coldzer0 / Macho-loader

Related projects ⓘ

Alternatives and complementary repositories for Macho-loader

• Fyyre / directntapi
  DirectNtApi - simple method to make ntapi function call without importing or walking export table. Work under Windows 7, 8 and 10
  ☆52Updated 8 months ago
• invictus1306 / Anti-debugging-techniques
  Anti-Debugging detection and obufuscation techniques that involved the use of Win32 API functions.
  ☆32Updated 8 years ago
• hasherezade / loaderine
  A demo implementation of a well-known technique used by some malware to evade userland hooking, using my library: libpeconv.
  ☆19Updated 6 years ago
• aaaddress1 / winInject101
  Windows Injection 101: from Zero to ROP (HITCON 2017)
  ☆27Updated 7 years ago
• JKornev / cfgdump
  Windbg extension that allows you analyze Control Flow Guard map
  ☆36Updated 3 years ago
• vdisasm / pas-vmp-glueimport
  Simple tool to add imports recovered by VMSweeper (by Vamit) to VMProtect dump file
  ☆14Updated 7 years ago
• owerosu / packerPE32
  Simple PE packer with RtlCompressBuffer
  ☆21Updated 9 years ago
• zhuyue1314 / stoned-UEFI-bootkit
  ☆27Updated 9 years ago
• yardenshafir / CallbackObjectAnalyzer
  Dumps information about all the callback objects found in a dump file and the functions registered for them
  ☆34Updated 4 years ago
• MortenSchenk / Privilege_Shellcode
  Kernel Shellcode to add all privileges in token
  ☆13Updated 7 years ago
• JKornev / hijacken
  Analyze and attack windows applications using dll hijacking vulnerabilities
  ☆55Updated 5 years ago
• azerg / PackerPE
  simple PE packer written in C++
  ☆54Updated 6 years ago
• mgeeky / prc_xchk
  User-mode process cross-checking utility intended to detect naive malware hiding itself by hooking IAT/EAT.
  ☆18Updated 8 years ago
• secrary / findLoop
  findLoop - find possible encryption/decryption or compression/decompression code
  ☆26Updated 5 years ago
• etormadiv / devirtualizeme32_vmp_3.0.9_v2
  Toy approach to VMProtect virtualization
  ☆15Updated 6 years ago
• zodiacon / AccessMask
  ☆18Updated 5 years ago
• sysopfb / Unpackers
  My collection of unpackers for malware packers/crypters
  ☆28Updated 7 years ago
• d35ha / xKeLogger
  Kernel mode windows NT API logger
  ☆21Updated 5 years ago
• nettitude / InlineFunctionHooking
  Windows Inline function hooking library targeted at MSVC
  ☆26Updated 8 years ago
• n3k / misc_exploits_pocs
  Miscellaneous old Exploit code and PoCs
  ☆15Updated last month
• edix / MyTerminateProcess
  Terminates a process by using DuplicateHandle and DUPLICATE_CLOSE_SOURCE flag.
  ☆9Updated 10 years ago
• Pigrecos / CodeDeobfuscator
  Code Deobfuscator
  ☆53Updated 8 years ago
• swatkat / arkitlib
  Windows anti-rootkit library
  ☆38Updated 9 years ago
• rwfpl / rewolf-ldrdebug
  Helper utility for debugging windows PE/PE+ loader.
  ☆50Updated 9 years ago
• segnolin / Vobfus
  virtualization obfuscator inspired by juhajong/vm-obfuscator
  ☆56Updated 4 years ago
• zhuhuibeishadiao / exploit-RemoteDesktopServerDriver
  exploit termdd.sys(support kb4499175)
  ☆57Updated 5 years ago
• hasherezade / tag_converter
  ☆21Updated 3 years ago
• hasherezade / beardisasm
  A wrapper for capstone for bearparser
  ☆13Updated last year