PELock / Simple-Polymorphic-Engine-SPE32Links
Simple Polymorphic Engine (SPE32) is a simple polymorphic engine for encrypting code and data. It is an amateur project that can be used to demonstrate what polymorphic engines are.
☆154Updated 2 years ago
Alternatives and similar repositories for Simple-Polymorphic-Engine-SPE32
Users that are interested in Simple-Polymorphic-Engine-SPE32 are comparing it to the libraries listed below
Sorting:
- Set of antianalysis techniques found in malware☆133Updated 2 years ago
- ShowStopper is a tool for helping malware researchers explore and test anti-debug techniques or verify debugger plugins or other solution…☆220Updated 3 years ago
- Advanced driver monitoring utility.☆218Updated 3 years ago
- A list of excellent resources for anyone to deepen their understanding with regards to Windows Kernel Exploitation and general low level …☆165Updated 3 years ago
- An obfuscation tool for Windows which instruments the Windows Loader into acting as an unpacking engine.☆314Updated 7 years ago
- Yet another windows internals repo☆212Updated 4 years ago
- Some research on AltSystemCallHandlers functionality in Windows 10 20H1 18999☆239Updated 6 years ago
- A helper utility for creating shellcodes. Cleans MASM file generated by MSVC, gives refactoring hints.☆188Updated 9 months ago
- Code Injection, Inject malicious payload via pagetables pml4.☆242Updated 4 years ago
- Anti-Debug encyclopedia contains methods used by malware to verify if they are executed under debugging. It includes the description of v…☆64Updated 2 years ago
- Simple windows API logger☆109Updated 6 years ago
- x64 Windows PatchGuard bypass, register process-creation callbacks from unsigned code☆207Updated 4 years ago
- This project provides a collection of Microsoft Windows kernel structures, unions and enumerations. Most of them are not officially docum…☆233Updated 3 months ago
- MalUnpack companion driver☆99Updated last year
- A more stealthy variant of "DLL hollowing"☆363Updated last year
- Virus Exchange (VX) - Collection of malware or assembly code used for "offensive" purposed.☆192Updated 6 months ago
- My notes while studying Windows exploitation☆193Updated 2 years ago
- Various Process Injection Techniques☆163Updated 3 years ago
- API Set resolver for Windows☆141Updated last year
- APC Internals Research Code☆168Updated 5 years ago
- Windows Kernel Programming☆133Updated 5 years ago
- Bootkit for Windows Sandbox to disable DSE/PatchGuard.☆316Updated last year
- Kernel Security driver used to block past, current and future process injection techniques on Windows Operating System.☆154Updated 3 years ago
- Executes 64bit code from a 32bit process☆241Updated 8 years ago
- Retrieve pointers to undocumented kernel functions and offsets to members within undocumented structures to use in your driver by using t…☆64Updated 6 years ago
- Kernel Detective☆150Updated 3 years ago
- Three Tiny Examples of Directly Using Vista's NtCreateUserProcess☆89Updated 10 years ago
- Process Hollowing for 32 bit and 64 bit☆79Updated 8 years ago
- Inject code into a legitimate process☆146Updated 11 years ago
- Packer (actually a crypter) for antivirus evasion implemented for windows PE files (BSc-Thesis)☆105Updated 5 years ago