Integration of Microsoft Warbird with the MSVC compiler
☆137Jul 16, 2023Updated 3 years ago
Alternatives and similar repositories for warbird-obfuscator
Users that are interested in warbird-obfuscator are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Reimplementation of Microsoft's Warbird obuscator☆231Jun 24, 2024Updated 2 years ago
- Using Microsoft Warbird to automatically unpack and execute encrypted shellcode in ClipSp.sys without triggering PatchGuard☆272Aug 31, 2022Updated 4 years ago
- Research on obfuscated licensing APIs / CLIP service in the Windows kernel☆146Aug 23, 2022Updated 4 years ago
- An analysis of the Warbird virtual-machine protection for the CI!g_pStore☆289Feb 6, 2018Updated 8 years ago
- ☆117Aug 7, 2022Updated 4 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- ☆14Mar 13, 2023Updated 3 years ago
- An example of how to use Microsoft Windows Warbird technology☆97Apr 23, 2023Updated 3 years ago
- Uses Threat-Intelligence ETW events to identify shellcode regions being hidden by fluctuating memory protections☆189May 17, 2023Updated 3 years ago
- ☆56Nov 7, 2024Updated last year
- Demo to show how write ALPC Client & Server using native Ntdll.dll syscalls.☆21Jan 25, 2022Updated 4 years ago
- Native code virtualizer for x64 binaries☆547Dec 20, 2024Updated last year
- Hooking the GDT - Installing a Call Gate. POC for Rootkit Arsenal Book Second Edition (version 2022)☆72Aug 11, 2023Updated 3 years ago
- X86 Mutation Engine with Portable Executable compatibility.☆544May 24, 2022Updated 4 years ago
- Easy Anti PatchGuard☆220Apr 9, 2021Updated 5 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Modify managed functions from unmanaged code☆53Feb 1, 2024Updated 2 years ago
- JavaScript debugger extension for WinDbg that allows to dump the partitions running on Hyper-V☆12Jul 28, 2021Updated 5 years ago
- Walks the CFG bitmap to find previously executable but currently hidden shellcode regions☆141May 17, 2023Updated 3 years ago
- ☆24May 27, 2025Updated last year
- A poc that abuses Enclave☆40Sep 8, 2022Updated 4 years ago
- ☆35Sep 12, 2024Updated 2 years ago
- Hook syscalls from ring0 without triggering PatchGuard☆33Oct 29, 2025Updated last year
- C/C++ Runtime library for system file (Windows Kernel Driver) - Supports Microsoft STL☆201Aug 19, 2026Updated 2 months ago
- Rewrite and obfuscate code in compiled binaries☆279Dec 13, 2025Updated 10 months ago
- End-to-end encrypted email - Proton Mail • AdSpecial offer: 40% Off Yearly / 80% Off First Month. All Proton services are open source and independently audited for security.
- Post exploitation technique to turn arbitrary kernel write / increment into full read/write primitive on Windows 11 22H2☆260Jul 5, 2022Updated 4 years ago
- LLVM based static binary analysis framework☆380Aug 15, 2026Updated 2 months ago
- Helper script for Windows kernel debugging with IDA Pro on VMware + GDB stub (including PDB symbols)☆69Aug 11, 2023Updated 3 years ago
- A WinDbg extension to trace COM interactions☆132Aug 14, 2025Updated last year
- ☆165Jul 31, 2022Updated 4 years ago
- ☆19Jul 31, 2026Updated 3 months ago
- Static Library For Windows Drivers☆42Jun 19, 2026Updated 4 months ago
- Hex-Rays microcode plugin for automated simplification of Windows Kernel decompilation.☆682Jan 28, 2025Updated last year
- Implementation of an export address table protection mitigation, like Export Address Filtering (EAF)☆114May 21, 2023Updated 3 years ago
- GPUs on demand by Runpod - Special Offer Available • AdRun AI, ML, and HPC workloads on powerful cloud GPUs—without limits or wasted spend. Deploy GPUs in under a minute and pay by the second.
- Sysmon-Like research tool for ETW☆397Nov 15, 2022Updated 3 years ago
- Admin to Kernel code execution using the KSecDD driver☆278Apr 19, 2024Updated 2 years ago
- Finding Truth in the Shadows☆127Jan 26, 2023Updated 3 years ago
- Kernel driver for detecting Intel VT-x hypervisors.☆203Jul 11, 2023Updated 3 years ago
- Single header version of System Informer's phnt library.☆251Mar 27, 2026Updated 7 months ago
- Minimalistic HTTP(S) client for the NT kernel☆61Dec 1, 2025Updated 11 months ago
- kernel driver used to monitor the activity of BadlionAnticheat.sys by patching its IAT☆32Jul 9, 2021Updated 5 years ago