Assembly block for finding and calling the windows API functions inside import address table(IAT) of the running PE file.
☆85May 3, 2023Updated 3 years ago
Alternatives and similar repositories for IAT_API
Users that are interested in IAT_API are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Assembly API block that uses CRC32 for resolving Windows API function addresses☆19May 19, 2023Updated 3 years ago
- Assembly block for hooking windows API functions.☆95Jul 16, 2019Updated 7 years ago
- Two C# RunPE's capable of x86 and x64 injections☆10Dec 2, 2018Updated 7 years ago
- inject shellcode into remote process via message hook☆15Oct 28, 2020Updated 6 years ago
- 新的注入方式☆11Sep 30, 2018Updated 8 years ago
- Open source password manager - Proton Pass • AdSecurely store, share, and autofill your credentials with Proton Pass, the end-to-end encrypted password manager trusted by millions.
- Map memory to user space and manipulate user memory, using capmon☆24Nov 3, 2018Updated 7 years ago
- Reflective PE packer.☆1,447Feb 22, 2024Updated 2 years ago
- This project was for my senior capstone at the University of Arizona. I wanted to create a payload that would potentially bypass AV / EDR…☆14Nov 14, 2023Updated 2 years ago
- A python metamorphic engine for PE/PE+ files.☆15Jan 1, 2023Updated 3 years ago
- The code is a pingback to the Dark Vortex blog:☆191Jan 26, 2023Updated 3 years ago
- An example of how x64 kernel shellcode can dynamically find and use APIs☆103May 14, 2020Updated 6 years ago
- A ready-made template for a project based on libpeconv.☆55Apr 18, 2026Updated 6 months ago
- Windows 10 UAC bypass PoC using LaunchInfSection☆36Aug 3, 2018Updated 8 years ago
- Driver and WinDBG scripts to dump information about all resources and lookaside lists☆67Apr 4, 2020Updated 6 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Demonstrates consuming from a SecurityTrace ETW session by consuming from the Threat-Intelligence ETW provider without a driver or PPL pr…☆85Jan 19, 2026Updated 9 months ago
- A reflexive driver loader to bypass Windows DSE (featuring a custom PE loader)☆42Sep 1, 2018Updated 8 years ago
- Injectable Windows DLL which enforces a W^X memory policy on a process☆15Mar 10, 2017Updated 9 years ago
- IDA Processor for Compiled YARA Rules☆28Jan 22, 2019Updated 7 years ago
- Code Integrity Violation Spotter☆17Jun 11, 2024Updated 2 years ago
- Adaptive DLL hijacking / dynamic export forwarding☆820Jul 6, 2020Updated 6 years ago
- API Hammering with C++20☆51Jul 21, 2022Updated 4 years ago
- 64bit Windows 10 shellcode that adds user BOKU:SP3C1ALM0V3 to the system and the localgroups Administrators & "Remote Desktop Users"☆38May 3, 2021Updated 5 years ago
- Libraries written in inline assembly☆19Aug 7, 2023Updated 3 years ago
- Deploy open-source AI quickly and easily - Special Bonus Offer • AdRunpod Hub is built for open source. One-click deployment and autoscaling endpoints without provisioning your own infrastructure.
- ☆12Aug 24, 2022Updated 4 years ago
- Specialized tool to dump Position Independent Code.☆22Aug 4, 2020Updated 6 years ago
- An obfuscation tool for Windows which instruments the Windows Loader into acting as an unpacking engine.☆312Oct 18, 2018Updated 8 years ago
- ☆15Dec 26, 2017Updated 8 years ago
- a simple app like CKnife☆12Oct 30, 2018Updated 8 years ago
- An extensible framework for easily writing compiler optimized position independent x86 / x64 shellcode for windows platforms.☆532Jul 2, 2025Updated last year
- PoC of BOOST-ed _EPROCESS.VadRoot iterating☆27May 21, 2014Updated 12 years ago
- ☆13Apr 23, 2019Updated 7 years ago
- A simple program to hook the current process to identify the manual syscall executions on windows☆264Nov 18, 2022Updated 3 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- A simple Linux in-memory .so loader☆35Mar 29, 2023Updated 3 years ago
- Add More Features for x64dbg Script System,with some Functions which will help Plugin Coder☆126Dec 26, 2021Updated 4 years ago
- For Example. See Miro's Blog☆29Nov 26, 2022Updated 3 years ago
- PoC capable of detecting manual syscalls from usermode.☆211Nov 13, 2025Updated 11 months ago
- Historical Windows temporal memory-state research artifact for studying time-bound memory observations, validation limits, and defensive …☆915May 15, 2026Updated 5 months ago
- Designed to learn OS specific anti-emulation patterns by fuzzing the Windows API.☆95Jul 7, 2020Updated 6 years ago
- ShowStopper is a tool for helping malware researchers explore and test anti-debug techniques or verify debugger plugins or other solution…☆227Mar 31, 2026Updated 7 months ago