Protects deletion of files with a specified extension using a kernel-mode driver.
☆76Jul 16, 2018Updated 8 years ago
Alternatives and similar repositories for Anti-Delete
Users that are interested in Anti-Delete are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Program to leak anti-virus behaviour and such☆13Apr 18, 2019Updated 7 years ago
- Kernel-mode file scanner☆19Jul 16, 2018Updated 8 years ago
- Reflective DLL Injection style process infector☆20Jul 23, 2018Updated 8 years ago
- Injectable Windows DLL which enforces a W^X memory policy on a process☆15Mar 10, 2017Updated 9 years ago
- Minimal Intervention and Software Transformation - PoC Packer designed for AV detection bypass☆18Nov 4, 2017Updated 8 years ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- PoC designed to evade userland-hooking anti-virus.☆89May 15, 2019Updated 7 years ago
- ☆12Feb 19, 2017Updated 9 years ago
- WhoCalls can query a directory of files, find the binaries, and search for a user specified Win API import. It and works with both 32-bit…☆19Jul 2, 2022Updated 4 years ago
- Fileless persistence, attacks and anti-forensic capabilties.☆91Dec 6, 2018Updated 7 years ago
- PoC for detecting and dumping code injection (built and extended on UnRunPE)☆58Oct 23, 2018Updated 8 years ago
- IDA反-反调试插件 IDAStealth v1.3.3, created 06/28/2011, Jan Newger☆21Apr 4, 2018Updated 8 years ago
- Enumerate the DLLs/Modules using NtQueryVirtualMemory☆32Jun 11, 2015Updated 11 years ago
- Dodgy reflective DLL injector PoC for 32-bit Windows☆17Aug 20, 2018Updated 8 years ago
- Windows Kernel Driver - Create a driver device in TDI layer of windows kernel to capture network data packets☆35Jul 21, 2014Updated 12 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- An aggregate of tools used in the core of vmp_dbg plus other parsing utils to parse vmp bc.☆17Oct 18, 2016Updated 10 years ago
- PoC for detecting and dumping process hollowing code injection☆53Oct 23, 2018Updated 8 years ago
- 基于WinDivert实现的一个包过滤与截断程序☆13Jul 22, 2018Updated 8 years ago
- Protect process fsfilter driver. Windows x64☆36Apr 11, 2016Updated 10 years ago
- Notes my learning steps about Windows-NT☆23May 18, 2017Updated 9 years ago
- a simple intel vt code both support x86 & x64. PatchGuard monitor.☆76Oct 28, 2021Updated 5 years ago
- x64 Kernel Hooks Detection☆21Jan 1, 2017Updated 9 years ago
- 驱动层拦截web访问源码☆29Apr 2, 2018Updated 8 years ago
- Wow64 syscall hook☆43May 28, 2017Updated 9 years ago
- Open source password manager - Proton Pass • AdSecurely store, share, and autofill your credentials with Proton Pass, the end-to-end encrypted password manager trusted by millions.
- ☆24Nov 17, 2017Updated 8 years ago
- .NET Framework 4.0 based Driver Loader for NoirVisor☆14Jan 12, 2021Updated 5 years ago
- Resources from my journey into Windows binary exploitation☆23Jan 14, 2019Updated 7 years ago
- A tool to help malware analysts tell that the sample is injecting code into other process.☆79Aug 12, 2015Updated 11 years ago
- Kernel Shellcode to add all privileges in token☆15Mar 13, 2017Updated 9 years ago
- windows kernel File redirection☆20Sep 21, 2014Updated 12 years ago
- Reverse engineered source code of the autochk rootkit☆213Nov 1, 2019Updated 7 years ago
- ☆35Oct 29, 2020Updated 6 years ago
- Open and generic Anti-Anti Reversing Framework. Works in 32 and 64 bits.☆64Nov 4, 2012Updated 13 years ago
- Serverless GPU API endpoints on Runpod - Get Bonus Credits • AdSkip the infrastructure headaches. Auto-scaling, pay-as-you-go, no-ops approach lets you focus on innovating your application.
- 参照着OLLVM写的一个混淆库,只要机器上有装LLVM，就可以直接编译拿来用☆55Feb 28, 2018Updated 8 years ago
- Windows 10 kernel and ntdll internal types, directly compatible with ida.☆52Oct 14, 2018Updated 8 years ago
- 一个简单的用于win7 x64的驱动级HIPS☆56Mar 7, 2016Updated 10 years ago
- A simple ransomware defender.It uses minifilter to filt "rewrite" and "delete" events in kernel.And it handles event in user mode.☆27Aug 14, 2018Updated 8 years ago
- Hide Driver By MiProcessLoaderEntry☆290May 17, 2019Updated 7 years ago
- Code injection by hijacking threads in Windows 32-bit applications☆43Oct 3, 2018Updated 8 years ago
- A file system filter, you can do some interesting thing, maybe it's cool.☆54Feb 15, 2019Updated 7 years ago