MahmoudZohdy / DLL-Obfuscation-V2Links
Load Encrypted Dll Using LoadLibraryA, Keep The Dll Encrypted on disc all the time and decrypt it only in memory.
☆23Updated 4 years ago
Alternatives and similar repositories for DLL-Obfuscation-V2
Users that are interested in DLL-Obfuscation-V2 are comparing it to the libraries listed below
Sorting:
- IAT-Obfuscation to make static analysis of executable harder.☆44Updated 4 years ago
- DLL-Obfuscation, Keep The Dll Encrypted on disc all the time and decrypt it only in memory.☆20Updated 4 years ago
- Proof-of-Concept software for detecting AV/EDR hooks in Windows libraries.☆36Updated 3 years ago
- Anti-Analysis technique, trick the debugger by Hiding events from it.☆20Updated 4 years ago
- Small handy tool for crafting shellcodes by hand.☆18Updated 3 years ago
- A collection of cpuid instruction implementations for anti-vm purposes.☆10Updated 2 years ago
- Bring Your Own Vulnerable Driver for PatchGuard & Driver Signature Enforcement☆14Updated last year
- Injects position-dependent code into a code cave in an executable file, and applies relocations.☆24Updated 2 years ago
- A simple program to obfuscate code written in cpp.☆51Updated last year
- A kernel mode Windows rootkit in development.☆49Updated 4 years ago
- Reduce Dynamic Analysis Detection Rates With Built-In Unhooker, Anti Analysis Techniques, And String Obfuscator Modules.☆21Updated 3 years ago
- manual mapping injector☆30Updated 3 months ago
- Dynamically generated obfuscated jumps and/or function calls☆38Updated 2 years ago
- Implementation of several code injection techniques.☆23Updated 3 years ago
- Hijack NotifyRoutine for a kernelmode thread☆41Updated 3 years ago
- UnknownField is a tool based clang that obfuscating the order of fields to protect your C/C++ game or code.☆44Updated 2 years ago
- ☆29Updated 3 years ago
- Load Dll into Kernel space☆39Updated 3 years ago
- An attempt at reversing WindowsDefender☆20Updated last year
- ☆39Updated 2 years ago
- Windows API Call Obfuscation☆112Updated 3 years ago
- Scan for potentially vulnerable drivers☆94Updated 3 years ago
- Tiny driver patch to allow kernel callbacks to work on Win10 21h1☆34Updated 3 years ago
- kernel to user mode APC injector☆46Updated 3 years ago
- Phantom DLL Hollowing method implemented in modmap☆17Updated 4 years ago
- ☆29Updated last year
- x64 Windows privilege elevation using anycall☆22Updated 4 years ago
- Reimplement CreateProcessInternalW via Windows 10 20H1+/Windows 11 Base on NtCreateUserProcess-Post☆75Updated last year
- Walks the Process' VAD list to grab the PTE's corresponding to a usermode virtual address, all to get the physical address☆23Updated 4 years ago
- Fake Timestamps of Driver Certificates while keeping validity.☆18Updated 4 years ago