D34Dspy / Simple-Mutation-BaseLinks
This is a simple mutation engine. It does not have many features and you have to add actual mutation, when you want to use it - It does mutate the given code at runtime! Not to mention, there is bad coding practice applied!
☆36Updated 8 years ago
Alternatives and similar repositories for Simple-Mutation-Base
Users that are interested in Simple-Mutation-Base are comparing it to the libraries listed below
Sorting:
- Disable Driver Callbacks☆104Updated 8 years ago
- Prototype of hijacking Windows driver dispatch routines in unmapped discardable sections☆55Updated 6 years ago
- Hooking SSDT with Avast Internet Security Hypervisor☆115Updated 6 years ago
- Capcom wrapper with safety in mind.☆83Updated 7 years ago
- Windows Kernel Driver dlls injector using APC☆63Updated 7 years ago
- Intercepting DeviceControl via WPP☆135Updated 6 years ago
- ☆155Updated 6 years ago
- Manual PE image mapper☆65Updated 12 years ago
- BattlEye x64 usermode injector☆66Updated 6 years ago
- Using DKOM to hide kernel mode drivers☆55Updated 7 years ago
- Communication via callback☆73Updated 6 years ago
- x64 syscall caller in C++.☆93Updated 7 years ago
- Recreation of GetProcAddress without external dependencies on Windows Libraries☆90Updated 9 years ago
- ☆75Updated 6 years ago
- BattlEye BEClient<->BEService usermode emulator☆82Updated 6 years ago
- A mini anti-anti debug hooking library for Windows.☆106Updated 4 years ago
- ☆38Updated 8 years ago
- a more stable & secure read/write virtual memory for kernel mode drivers☆161Updated 5 years ago
- disable most common windowsx64 systems patchguard☆86Updated 6 years ago
- Currently supports injecting signed/unsigned DLLs in 64-bit processes☆63Updated 5 years ago
- A simple program to scan for open handles in a process.☆61Updated 8 years ago
- A quick-and-dirty anti-hook library proof of concept.☆105Updated 7 years ago
- A documented Windows x64 bit Usermode Injector that works via hooking IAT and hijacking its threads to execute shellcode.☆66Updated 2 years ago
- Elevate a process to be a protected process☆153Updated 6 years ago
- Dump system call codes, names, and offsets from Ntdll.dll☆81Updated 2 years ago
- Disks for DMA☆114Updated 4 years ago
- r0akmap is a PoC driver manual mapper based on r0ak☆39Updated 7 years ago
- A library to read physical memory and system-wide virtual memory.☆127Updated 7 years ago
- based on https://github.com/secrary/Hooking-via-InstrumentationCallback☆72Updated 6 years ago
- PE-Dump-Fixer☆110Updated 5 years ago