D1rkMtr / VMwareHunting
☆13Updated this week
Related projects: ⓘ
- ☆26Updated 2 months ago
- ☆43Updated this week
- Repository of Microsoft Driver Block Lists based off of OS-builds☆38Updated 5 months ago
- API Hammering with C++20☆34Updated 2 years ago
- Bypass UAC elevation on Windows 8 (build 9600) & above.☆53Updated 2 years ago
- ☆23Updated 4 months ago
- A class to emulate the behavior of NtQuerySystemInformation when passed the SystemHypervisorDetailInformation information class☆24Updated last year
- Research of modifying exported function names at runtime (C/C++, Windows)☆16Updated 3 months ago
- ☆24Updated this week
- Set the process mitigation policy for loading only Microsoft Modules , and block any userland 3rd party modules☆41Updated last year
- Piece of code to detect and remove hooks in IAT☆51Updated 2 years ago
- Your NTDLL vaccine from modern direct syscall methods.☆35Updated 2 years ago
- ☆12Updated 2 years ago
- ☆96Updated 2 years ago
- Research into removing strings & API call references at compile-time (Anti-Analysis)☆22Updated 3 months ago
- ☆10Updated 5 months ago
- Process Injection: APC Injection☆27Updated 3 years ago
- Enabled / Disable LSA Protection via BYOVD☆61Updated 2 years ago
- Former Multi - Ring to Kernel To UserMode Transitional Shellcode For Remote Kernel Exploits☆28Updated 2 years ago
- Get your data from the resource section manually, with no need for windows apis☆52Updated last year
- ☆15Updated 3 years ago
- Manually perform syscalls without going through any external API or DLL.☆16Updated last year
- Dll injection through code page id modification in registry. Based on jonas lykk research☆116Updated last year
- ☆27Updated last year
- ☆58Updated this week
- ☆24Updated 5 months ago
- ☆81Updated 3 months ago
- Small tool to play with IOCs caused by Imageload events☆37Updated last year
- Demo to show how write ALPC Client & Server using native Ntdll.dll syscalls.☆20Updated 2 years ago
- Tiny driver patch to allow kernel callbacks to work on Win10 21h1☆31Updated 2 years ago