NtRaiseHardError / LeakMyAV

Related projects: ⓘ

• d35ha / DumpPE
  Dump mapped PE files from memory to the disk
  ☆17Updated 5 years ago
• HFaeiro / Remote-Admin-Tool
  Simple remote administration tool. Written in c++ and MASM.
  ☆18Updated 6 years ago
• d35ha / xPE
  Simple library to handle PE files loading, relocating, get/set data, ..., in addition to process handling
  ☆30Updated 5 years ago
• Zeta314 / RedButler
  ☆27Updated this week
• kkent030315 / anyelevate
  x64 Windows privilege elevation using anycall
  ☆19Updated 3 years ago
• d35ha / PEReflectiveInjection
  Remote PE reflective injection with a simple reflective loader
  ☆28Updated 5 years ago
• TRIKbranch / RunPE-X86--X64-
  With this RunPE you can easily inject your payload in any x86 or x64 program.
  ☆13Updated 5 years ago
• NtRaiseHardError / MIST
  Minimal Intervention and Software Transformation - PoC Packer designed for AV detection bypass
  ☆17Updated 6 years ago
• zwclose / veeamon
  ☆16Updated 4 years ago
• wyyqyl / HookIAT
  ☆14Updated 11 years ago
• NtRaiseHardError / Phage
  Reflective DLL Injection style process infector
  ☆19Updated 6 years ago
• cocomelonc / 2022-01-14-malware-injection-13
  Code injection via ZwCreateSection, ZwUnmapViewOfSection. C++ example
  ☆17Updated 2 years ago
• cxxrev0to1dev / nb_obfuscator
  win32/x64 obfuscate framework
  ☆32Updated 5 years ago
• MahmoudZohdy / Anti-Analysis-DebuggerInjection
  Anti-Analysis technique, trick the debugger by Hiding events from it.
  ☆18Updated 3 years ago
• mgeeky / prc_xchk
  User-mode process cross-checking utility intended to detect naive malware hiding itself by hooking IAT/EAT.
  ☆18Updated 8 years ago
• hasherezade / loaderine
  A demo implementation of a well-known technique used by some malware to evade userland hooking, using my library: libpeconv.
  ☆19Updated 6 years ago
• Vicshann / PEProtectDrv
  Some crazy PE executables protection kernel driver
  ☆18Updated 4 years ago
• masterpastaa / face-injector-v2
  working injector bp (BE EAC & VANGUARD)
  ☆4Updated 3 years ago
• XShar / Run_pe_cryptor_x64
  Криптор с антиэмуляцией и полиморфизмом для x64
  ☆14Updated 5 years ago
• HFaeiro / Lialis
  Rebuild of the original Remote Admin Tool
  ☆9Updated 4 years ago
• freesoul / netstub
  Create a C++ PE which loads an XTEA-crypted .NET PE shellcode in memory.
  ☆15Updated 5 years ago
• blaquee / APCHook
  hooking KiUserApcDispatcher
  ☆22Updated 7 years ago
• MockbaTheBorg / RETSpoof
  RET / JMP RBX call spoofer
  ☆9Updated 5 years ago
• d35ha / ShellInjector
  Execute an arbitrary command within the context of another process
  ☆19Updated 5 years ago
• alex9191 / KernelModeMonitor
  ☆31Updated this week
• wolk-1024 / CrossInject
  x86/x64 dll injector
  ☆28Updated 2 years ago
• Alexuiop1337 / AntiDisassembly
  Basic disassembly technique to slow down disasm process
  ☆10Updated 4 years ago
• d35ha / xKeLogger
  Kernel mode windows NT API logger
  ☆21Updated 5 years ago
• revsic / CodeInjection
  Code Injection technique written in cpp language
  ☆31Updated 6 years ago
• mq1n / SonicInjector
  Dll injector POC for new handle stealing technique
  ☆20Updated 6 years ago