MoePus / wowHijack
Run some secret code invisible from debugger single step.(x86 process on x64 windows only)
☆24Updated 5 years ago
Alternatives and similar repositories for wowHijack:
Users that are interested in wowHijack are comparing it to the libraries listed below
- Call 32bit NtDLL API directly from WoW64 Layer☆60Updated 4 years ago
- Yet another windows syscall library☆18Updated 4 years ago
- ☆33Updated 3 years ago
- ☆13Updated last year
- Windows Application Loader Running *.Exe files in Memory against Scrylla☆21Updated 5 years ago
- This is a simple driver with x64 inline assembly☆54Updated 4 years ago
- Yet another Windows DLL injector.☆38Updated 3 years ago
- Windbg extension that allows you analyze Control Flow Guard map☆34Updated 3 years ago
- Dump PDB Symbols including support for Bochs Debugging Format (with wine support)☆15Updated last year
- ☆45Updated 4 years ago
- r0ak ("roak") is the Ring 0 Army Knife -- A Command Line Utility To Read/Write/Execute Ring Zero on for Windows 10 Systems☆14Updated 6 years ago
- An API Monitor based on Instrumentation☆43Updated 7 years ago
- Code Integrity Violation Spotter☆16Updated 9 months ago
- Windows Injection 101: from Zero to ROP (HITCON 2017)☆28Updated 7 years ago
- exploit termdd.sys(support kb4499175)☆58Updated 5 years ago
- This is a POC for loading shared object directly from memory without accessing the actual Linux file system.☆22Updated 4 years ago
- automates exploits using ROP chains, using ntdll-scraper☆16Updated 2 years ago
- vmware-backdoor☆33Updated 3 years ago
- 参考taviso的代码逆向一下mpengine.dll☆19Updated 2 years ago
- ☆19Updated 5 years ago
- ☆12Updated 3 years ago
- Helper scripts for windows debugging with symbols for Bochs and IDA Pro (PDB files). Very handy for user mode <--> kernel mode☆19Updated last year
- vm -- code interpreter☆26Updated 5 years ago
- A Proof-of-Concept win32 DLL that makes use of netbios session token replay to propagate through a Windows Domain☆25Updated 6 years ago
- Hooking the GDT - Installing a Call Gate. POC for Rootkit Arsenal Book Second Edition (version 2022)☆70Updated last year
- POC about how to prevent windbg break☆15Updated 2 years ago
- Kernel-mode file scanner☆18Updated 6 years ago
- Helper Script to convert a Windbg dumped structure (using the 'dt' command) into a C structure. It creates dummy structs for you if neede…☆26Updated last year
- ☆11Updated 4 years ago
- Bootkits☆19Updated last year