H4ckF0rFun / HoldingHands

Related projects: ⓘ

• WINGS2709 / 360Safe
  大数字驱动逆向代码
  ☆66Updated 10 months ago
• smallzhong / KernelHook
  一个用来做windows内核hook的框架
  ☆78Updated 5 months ago
• DragonQuestHero / Medusa
  Radical Windows ARK
  ☆199Updated last week
• Oxygen1a1 / DrvMon
  a monitoring windows driver calls kernel api tools
  ☆87Updated 2 months ago
• liangfei44 / VmWareThrough
  ☆178Updated last year
• zzhouhe / VM_Analyze
  ☆77Updated 3 years ago
• killvxk / llvm-msvc-ex
  Forked LLVM focused on MSVC Compatibility. This version is designed for windows users
  ☆72Updated 3 weeks ago
• DNLINYJ / DetectVMP3
  A POC to detect the exist of VMProtect 3 protection by search feature watermark.
  ☆76Updated 9 months ago
• Oxygen1a1 / kcrypt
  an encryption library designed for Windows kernel and driver programming
  ☆113Updated last year
• DragonQuestHero / WindowsKernelPrivateSymbolsDump
  Win7内核私有符号结构转储
  ☆64Updated 3 years ago
• DATA-GaMi / WindowsKernelBook
  《Windows 内核安全编程技术实践》 系列丛书，探索 Anti RootKit 反内核工具核心原理与技术实现细节。
  ☆25Updated last year
• windpiaoxue / sc4cpp
  sc4cpp is a shellcode framework based on C++
  ☆86Updated 3 years ago
• PIKACHUIM / FakeSign
  自建时间戳服务器实现伪签名驱动证书 Implementing Pseudo Signature with Self-Sign Timestamp Servers
  ☆173Updated 8 months ago
• A-Normal-User / NtSocket_NtClient_NtServer
  Using NtCreateFile and NtDeviceIoControlFile to realize the function of winsock（利用NtCreateFile和NtDeviceIoControlFile 实现winsock的功能）
  ☆98Updated 2 years ago
• cbwang505 / unicorn-whpx
  跨平台模拟执行unicorn框架基于Qemu的TCG模式(Tiny Code Generator),以无硬件虚拟化支持方式实现全系统的虚拟化,支持跨平台和架构的CPU指令模拟,本文讨论是一款笔者的实验性项目采用Windows Hypervisor Platform虚拟机模式…
  ☆63Updated 9 months ago
• lainswork / shellcode-factory
  shellcode 生成框架
  ☆232Updated 2 years ago
• AimiP02 / BronyaObfus
  整合Pluto-Obfuscator和goron部分混淆，移植到LLVM-16.0.x，使用NewPassManager
  ☆90Updated last year
• mizukiyyds / asm_obfuscator
  非编译时代码混淆，包括代码块拆分、代码乱序、常量加密、代码变异、抹除jcc、局部混淆等，主要提供框架以及思路
  ☆29Updated last year
• satadriver / myLittleBear
  myLittleBear
  ☆55Updated 11 months ago
• ddddhm1234 / TTDEngine
  ☆25Updated 9 months ago
• ilovecsad / Ark
  ☆78Updated 2 years ago
• A-Normal-User / Pretend_HideVirtualMemory
  利用物理内存映射，实现虚拟内存的伪隐藏
  ☆69Updated 2 years ago
• kouzhudong / AntiHook
  Enum and Remove Hook in Windows
  ☆31Updated 3 months ago
• zhutingxf / InfinityHookPro
  InfinityHook 支持Win7 到 Win11 最新版本，虚拟机环境及物理机环境
  ☆24Updated 8 months ago
• IcEy-999 / xx_tvm
  ☆86Updated this week
• Neo-Maoku / Shellcode_Generator
  IDA Python script for generating Windows x86 shellcode with one click
  ☆33Updated last year
• DragonQuestHero / WindowsSyscallsEx
  Quick check of NT kernel exported&unexported functions/global variable offset NT内核导出以及未导出函数+全局变量偏移速查
  ☆90Updated last year
• cs1ime / DICHook
  Hook NtDeviceIoControlFile with PatchGuard
  ☆100Updated 2 years ago
• smallzhong / hide_execute_memory
  隐藏可执行内存
  ☆239Updated 6 months ago
• mizukiyyds / od_plugin
  这是一个Ollydbg插件，它提供了非常多友好的功能包括但不限于方便的数据提取，一键trace，跟踪api调用，iat修复等等
  ☆15Updated last year