HACKE-RC / peritux
A PE parser written in C++ which does not uses OOP. Helpful if you want to learn about PE parsing.
☆16Updated last year
Alternatives and similar repositories for peritux:
Users that are interested in peritux are comparing it to the libraries listed below
- ☆25Updated 5 months ago
- This x64dbg plugin allows you to upload your sample to Malcore and view the results.☆33Updated last year
- A few examples of how to trap virtual memory access on Windows.☆28Updated 3 months ago
- PEIM (UEFI) bootkit targeting OVMF (EDK2)☆34Updated last year
- Implementation of Advanced Module Stomping and Heap/Stack Encryption☆9Updated last year
- Extract data of TTD trace file to a minidump☆28Updated last year
- ☆17Updated last month
- A driver to implement IOCTL hooking☆24Updated 3 years ago
- ☆28Updated 2 years ago
- A VMWare logger using built-in backdoor.☆27Updated 5 months ago
- A journal for $6,000 Riot Vanguard bounty.☆62Updated last year
- WinXPSP2.Cermalus on stereoids, supporting all 32 bits Windows version. Windows Kernel Virus stuff for noobs☆17Updated last year
- PyKD DLLs for x86 and x64 platforms☆17Updated last year
- Rule Engine for Dynamic Malware Analysis and Research☆16Updated this week
- ☆31Updated 2 years ago
- Native Powers Talk demos☆14Updated last year
- Hooking the GDT - Installing a Call Gate. POC for Rootkit Arsenal Book Second Edition (version 2022)☆70Updated last year
- Helper Script to convert a Windbg dumped structure (using the 'dt' command) into a C structure. It creates dummy structs for you if neede…☆26Updated last year
- An example of how to use Microsoft Windows Warbird technology☆27Updated last year
- ☆18Updated 4 years ago
- Custom instruction length for hex-rays☆18Updated 2 months ago
- ☆29Updated 3 years ago
- WslinkVMAnalyzer is a tool to facilitate analysis of code protected by a virtual machine featured in Wslink malware☆45Updated 2 years ago
- Currently proof-of-concept☆16Updated 3 years ago
- A class to emulate the behavior of NtQuerySystemInformation when passed the SystemHypervisorDetailInformation information class☆26Updated last year
- This repository contains an IDA processor for loading and disassembling compiled yara rules.☆40Updated 2 months ago
- A minimalistic logger for Windows Kernel Drivers.☆20Updated last year
- A years-old exploit of a local EoP vulnerability in Kingsoft Antivirus KWatch Driver version 2009.3.17.77.☆38Updated 3 years ago
- Neutralize KEPServerEX anti-debugging techniques☆31Updated 2 years ago
- ☆23Updated last year