Lima-X / Win32.Nebula

Related projects: ⓘ

• Lima-X / XOrCryptEx
  XOrCryptEx lightweight C Utility/Algorithm
  ☆11Updated 2 years ago
• Broihon / ProcessInfo
  A class to gather information about a process, its threads and modules.
  ☆23Updated 4 years ago
• ByteWhite1x1 / PatchGuardResearch
  Bypassing kernel patch protection runtime
  ☆19Updated last year
• ZaweSec / KasperskyHook_NewKSDriver
  ☆31Updated last year
• NewWorldComingSoon / UnknownField
  UnknownField is a tool based clang that obfuscating the order of fields to protect your C/C++ game or code.
  ☆44Updated last year
• msmania / hk
  Injector with kernel power
  ☆15Updated 3 years ago
• d35ha / xPE
  Simple library to handle PE files loading, relocating, get/set data, ..., in addition to process handling
  ☆30Updated 5 years ago
• samshine / ScyllaHideDetector2
  Allows you to find the use of ScyllaHide, if your program will debug and restore hooking functions bytes.
  ☆22Updated 5 years ago
• cxxrev0to1dev / nb_obfuscator
  win32/x64 obfuscate framework
  ☆32Updated 5 years ago
• gigabitwize / dank
  Driver Loader/BE Bypass/Win Malware(lol)
  ☆33Updated 5 years ago
• SamuelTulach / EvilKaspersky
  ☆19Updated 7 months ago
• kkent030315 / anyelevate
  x64 Windows privilege elevation using anycall
  ☆19Updated 3 years ago
• backengineering / msrexec
  Elevate arbitrary MSR writes to kernel execution.
  ☆16Updated last year
• kkent030315 / EvilHooker
  Function hooks in Windows NT Kernel
  ☆21Updated 3 years ago
• crvvdev / intraceptor
  Intraceptor intercept Windows NT API calls and redirect them to a kernel driver to bypass process/threads handle protections.
  ☆27Updated 2 years ago
• h4xu3lyn / FuckPg
  Analysing and defeating PatchGuard universally
  ☆34Updated 3 years ago
• gmh5225 / Driver-SoulExtraction
  SoulExtraction is a windows driver library for extracting cert information in windows drivers
  ☆20Updated last year
• UCFoxi / NotifyRoutineHijackThread
  Hijack NotifyRoutine for a kernelmode thread
  ☆40Updated 2 years ago
• oberrich / phnt_nightly
  Native API header files for the Process Hacker project (nightly).
  ☆23Updated this week
• XShar / Super_Hide_String
  Скрытие строки от отладчиков и декомпиляторов
  ☆51Updated 4 years ago
• rbapat / KernelInjector
  Stealthy Injector that leverages a vulnerable driver and other exploits to remain undetected
  ☆36Updated 5 years ago
• kkent030315 / kernel_callbacks
  Bypasses for Windows kernel callbacks PatchGuard protection
  ☆42Updated 3 years ago
• alfarom256 / UserVAtoPhysical
  Walks the Process' VAD list to grab the PTE's corresponding to a usermode virtual address, all to get the physical address
  ☆23Updated 2 years ago
• christianshub / process-injection-guard
  Signature scanner and API hooks to detect malicious process injection
  ☆18Updated last year
• MahmoudZohdy / Anti-Analysis-DebuggerInjection
  Anti-Analysis technique, trick the debugger by Hiding events from it.
  ☆18Updated 3 years ago
• BerkanYildiz / EasyNT
  Simplifies the Windows Kernel APIs by making the existing function easier to use, and extends them by creating functions that could possi…
  ☆26Updated last month
• mrexodia / MBR
  EDR PoC WIP LLC
  ☆10Updated 7 months ago
• R4YVEN / DriverTimestampFaker
  Fake Timestamps of Driver Certificates while keeping validity.
  ☆16Updated 3 years ago
• emlinhax / DbgViewEx
  combine the power of procmon and dbgview into one single application
  ☆8Updated 7 months ago
• Deputation / syscall_extractor
  A C++ syscall ID extractor for Windows. Developed, debugged and tested on 20H2.
  ☆18Updated 3 years ago