NTTITON / Malware

Related projects: ⓘ

• rwfpl / rewolf-pcausa-exploit
  PCAUSA Rawether for Windows Local Privilege Escalation
  ☆36Updated 7 years ago
• zerosum0x0 / zeroload
  ☆34Updated this week
• sogeti-esec-lab / REBoot
  Bootkits Revisited
  ☆41Updated 10 years ago
• Microwave89 / syscalltest
  PoC for Bypassing UM Hooks By Bruteforcing Intel Syscalls
  ☆39Updated 8 years ago
• deroko / activationcontexthook
  ☆33Updated 6 years ago
• AlephNull314 / AbsoluteZero
  Anti-AV compilation
  ☆42Updated 10 years ago
• Microwave89 / injector
  Code Injector Using Code Caves
  ☆14Updated 9 years ago
• hasherezade / loaderine
  A demo implementation of a well-known technique used by some malware to evade userland hooking, using my library: libpeconv.
  ☆19Updated 6 years ago
• aaaddress1 / HellKitty-In-VC
  Ring3 Rootkit Backdoor.
  ☆40Updated 9 years ago
• hasherezade / IAT_patcher_samples
  Sample libraries to be used with IAT Patcher
  ☆33Updated last year
• deroko / SPPLUAObjectUacBypass
  ☆45Updated 6 years ago
• atlantis2013 / Evasion-Tools
  Anti-technique Codes, Detection of Anti-technique codes
  ☆36Updated 10 years ago
• nyx0 / Grum
  The Grum Spam Bot
  ☆20Updated 9 years ago
• stolenbytes / apcforthewin
  ☆16Updated 7 years ago
• psaneme / Kung-Fu-Malware
  ☆32Updated 6 years ago
• ximerus / Kryptonite
  A Win32 PE/Executable Crypter that employs on the fly encryption & decryption of memory
  ☆32Updated 10 years ago
• owerosu / packerPE32
  Simple PE packer with RtlCompressBuffer
  ☆21Updated 9 years ago
• sysopfb / Unpackers
  My collection of unpackers for malware packers/crypters
  ☆28Updated 7 years ago
• d35ha / xKeLogger
  Kernel mode windows NT API logger
  ☆21Updated 5 years ago
• karttoon / asm_buddy
  Small script to assemble/disassemble from CLI
  ☆22Updated 2 years ago
• m0nad / PSG
  "Polymorphic" shellcode generator (x86)
  ☆23Updated 9 years ago
• Prevenity / malware_monitor
  Malware monitor template based on MinHook
  ☆16Updated 9 years ago
• ScorchSecurity / Toast
  User-mode hook bypassing method
  ☆32Updated 8 years ago
• swwwolf / obderef
  Decrement Windows Kernel for fun and profit
  ☆38Updated 6 years ago
• secrary / findLoop
  findLoop - find possible encryption/decryption or compression/decompression code
  ☆25Updated 5 years ago
• zerosum0x0 / ldos-ionescu007
  ☆19Updated this week
• bhassani / Alina
  Alina POS Source Code + Rootkit
  ☆23Updated 8 years ago
• BorjaMerino / tlsInjector
  Python script to inject and run shellcodes through TLS callbacks
  ☆50Updated 9 years ago
• sysopfb / VM_Timing_Detect
  ☆12Updated 7 years ago
• Rootkitsmm-zz / WinIo-Vidix
  Exploit WinIo - Vidix and Run Shellcode in Windows Kerne ( local Privilege escalation )
  ☆28Updated 9 years ago