Windows API Call Obfuscation
☆112Dec 9, 2022Updated 3 years ago
Alternatives and similar repositories for APICallProxy
Users that are interested in APICallProxy are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- ☆10Sep 11, 2026Updated last month
- Hijack NotifyRoutine for a kernelmode thread☆39Jun 4, 2022Updated 4 years ago
- Load Encrypted Dll Using LoadLibraryA, Keep The Dll Encrypted on disc all the time and decrypt it only in memory.☆25Sep 5, 2021Updated 5 years ago
- DLL-Obfuscation, Keep The Dll Encrypted on disc all the time and decrypt it only in memory.☆21Sep 6, 2021Updated 5 years ago
- Simple memory obfuscator.☆21Jul 21, 2022Updated 4 years ago
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- IAT-Obfuscation to make static analysis of executable harder.☆44Sep 6, 2021Updated 5 years ago
- it's a driver injector or driver loader header lib(Windows)☆13Aug 5, 2023Updated 3 years ago
- Read Memory without ReadProcessMemory for Current Process☆88Feb 13, 2022Updated 4 years ago
- Walks through the 4-level paging structures in Windows x64☆14Feb 12, 2023Updated 3 years ago
- ☆14Mar 8, 2019Updated 7 years ago
- Demonstrate calling a kernel function and handle process creation callback against HVCI☆87Dec 21, 2022Updated 3 years ago
- improving zerosums smbdoor - a silent remote backdoor which abuses undoc. APIs in srvnet.sys☆49Mar 10, 2023Updated 3 years ago
- Open-source EDR kernel-component for system monitoring and DLL injection☆33Nov 14, 2020Updated 5 years ago
- windows kernelmode driver to inject dll into each and every process and perform systemwide function hooking☆54Aug 28, 2022Updated 4 years ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- A kernel mode Windows rootkit in development.☆46Dec 31, 2021Updated 4 years ago
- Walks the Process' VAD list to grab the PTE's corresponding to a usermode virtual address, all to get the physical address☆23Nov 22, 2021Updated 4 years ago
- Anti-Analysis technique, trick the debugger by Hiding events from it.☆19Sep 6, 2021Updated 5 years ago
- query specific user and login IP from remote machine☆18Nov 19, 2022Updated 3 years ago
- Callstack spoofing using a VEH because VEH all the things.☆23Mar 18, 2025Updated last year
- Bypasses for Windows kernel callbacks PatchGuard protection☆46Aug 15, 2021Updated 5 years ago
- base for testing☆202Sep 28, 2024Updated 2 years ago
- ☆165Jul 31, 2022Updated 4 years ago
- Various Process Injection Techniques☆166Jun 14, 2022Updated 4 years ago
- Deploy open-source AI quickly and easily - Special Bonus Offer • AdRunpod Hub is built for open source. One-click deployment and autoscaling endpoints without provisioning your own infrastructure.
- ☆17Jan 9, 2023Updated 3 years ago
- Call NtCreateUserProcess directly as normal.☆78May 17, 2022Updated 4 years ago
- Analyze patches in a process☆264Jul 28, 2021Updated 5 years ago
- Execute a payload at each right click on a file/folder in the explorer menu for persistence☆172Mar 15, 2023Updated 3 years ago
- ☆55Dec 21, 2022Updated 3 years ago
- ☆157May 21, 2024Updated 2 years ago
- ☆15Dec 16, 2020Updated 5 years ago
- ☆117Aug 7, 2022Updated 4 years ago
- Get your data from the resource section manually, with no need for windows apis☆66Oct 22, 2024Updated 2 years ago
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- Hooking the GDT - Installing a Call Gate. POC for Rootkit Arsenal Book Second Edition (version 2022)☆72Aug 11, 2023Updated 3 years ago
- A PoC tool for exploiting leaked process and thread handles☆36Feb 13, 2024Updated 2 years ago
- x64 Windows kernel code execution via user-mode, arbitrary syscall, vulnerable IOCTLs demonstration☆430Jul 6, 2022Updated 4 years ago
- Hook syscalls from ring0 without triggering PatchGuard☆33Oct 29, 2025Updated last year
- Thread Stack Spoofing - PoC for an advanced In-Memory evasion technique allowing to better hide injected shellcode's memory allocation fr…☆1,254Jun 17, 2022Updated 4 years ago
- Windows CVE主防(HIPS/HIDS)☆58May 2, 2026Updated 6 months ago
- Scans all modules in target process for jmp/int3 hooks dissassembles then and follows jmps to destination.☆87Nov 5, 2023Updated 3 years ago