FrankStain / pe-loader
library, which help to describe or load and execute PE files.
☆54Updated 11 years ago
Alternatives and similar repositories for pe-loader:
Users that are interested in pe-loader are comparing it to the libraries listed below
- Helper utility for debugging windows PE/PE+ loader.☆51Updated 9 years ago
- A-Protect Anti Rootkit Tool☆53Updated 11 years ago
- Simple proof of concept code for injecting libraries on 64bit processes from a 32bit process☆95Updated 6 years ago
- windows create process with a dll load first time via LdrHook☆30Updated 8 years ago
- This is a VmProtect integrated debugger, that will essentially allow you to disasm and debug vmp partially virtualized functions at the v…☆45Updated 8 years ago
- Windows anti-rootkit library☆38Updated 9 years ago
- ☆25Updated 4 years ago
- Examples for detection of hidden processes on windows☆33Updated 10 years ago
- 锁主页驱动☆37Updated 5 years ago
- Library for kernel and user mode splicing for Windows (x86 and x64).☆63Updated 12 years ago
- GetHooks is a program designed for the passive detection and monitoring of hooks from a limited user account.☆61Updated 3 years ago
- Decrement Windows Kernel for fun and profit☆37Updated 7 years ago
- Proof of concept implementation of in-memory PE Loader based on ReflectiveDLLInjection Technique☆151Updated 6 years ago
- Open and generic Anti-Anti Reversing Framework. Works in 32 and 64 bits.☆64Updated 12 years ago
- Analyze PatchGuard☆54Updated 6 years ago
- Kinject - kernel dll injector, currently available in x86 version, will be updated to x64 soon.☆32Updated 9 years ago
- Analyze and attack windows applications using dll hijacking vulnerabilities☆56Updated 5 years ago
- A command line tool to load and unload a device driver.☆47Updated 7 years ago
- OpenSrc projects; common multiprojects headers store to ./Common/*category*/☆48Updated 10 years ago
- simple PE packer written in C++☆55Updated 7 years ago
- An Attempt to Bypass Memory Scanners By Misusing the ntdll.dll "RT" Section.☆95Updated 9 years ago
- Generates a Python script to give public interface names in an ActiveX file to an IDB file.☆48Updated 3 years ago
- Protect process fsfilter driver. Windows x64☆34Updated 8 years ago
- PoC for detecting and dumping code injection (built and extended on UnRunPE)☆56Updated 6 years ago
- use windows ntdll api easily,☆23Updated 9 years ago
- Wow64 syscall hook☆40Updated 7 years ago
- ☆35Updated 9 years ago
- PE(compressed dll) memory loader using nt api☆44Updated 7 years ago
- ☆80Updated 7 years ago
- OpenHIPS prevents exploitation of Windows systems☆33Updated 12 years ago