PELock / Simple-Polymorphic-Engine-SPE32
Simple Polymorphic Engine (SPE32) is a simple polymorphic engine for encrypting code and data. It is an amateur project that can be used to demonstrate what polymorphic engines are.
☆143Updated 2 years ago
Alternatives and similar repositories for Simple-Polymorphic-Engine-SPE32:
Users that are interested in Simple-Polymorphic-Engine-SPE32 are comparing it to the libraries listed below
- Set of antianalysis techniques found in malware☆132Updated last year
- A list of excellent resources for anyone to deepen their understanding with regards to Windows Kernel Exploitation and general low level …☆142Updated 2 years ago
- Advanced driver monitoring utility.☆207Updated 2 years ago
- A helper utility for creating shellcodes. Cleans MASM file generated by MSVC, gives refactoring hints.☆174Updated 4 months ago
- Virus Exchange (VX) - Collection of malware or assembly code used for "offensive" purposed.☆178Updated 3 years ago
- ShowStopper is a tool for helping malware researchers explore and test anti-debug techniques or verify debugger plugins or other solution…☆204Updated 2 years ago
- Various Process Injection Techniques☆148Updated 2 years ago
- Yet another windows internals repo☆205Updated 3 years ago
- masm32 kernel programming, drivers, tutorials, examples, and tools (credits Four-F)☆121Updated last year
- Anti-debugging techniques on a (bad looking) Win32 application.☆240Updated last year
- ☆104Updated 5 years ago
- Simple windows API logger☆101Updated 5 years ago
- x64 Windows PatchGuard bypass, register process-creation callbacks from unsigned code☆202Updated 3 years ago
- MalUnpack companion driver☆98Updated 10 months ago
- Code from my "game modding" livestreams! Follow along and learn☆37Updated 3 years ago
- A library to develop kernel level Windows payloads for post HVCI era☆394Updated 3 years ago
- A multi-staged malware that contains a kernel mode rootkit and a remote system shell.☆71Updated 3 years ago
- Some research on AltSystemCallHandlers functionality in Windows 10 20H1 18999☆209Updated 5 years ago
- Kernel Security driver used to block past, current and future process injection techniques on Windows Operating System.☆152Updated 2 years ago
- Windows Kernel Programming☆126Updated 4 years ago
- A more stealthy variant of "DLL hollowing"☆345Updated last year
- An attempt to restore and adapt to modern Win10 version the 'Rootkit Arsenal' original code samples☆70Updated 3 years ago
- An obfuscation tool for Windows which instruments the Windows Loader into acting as an unpacking engine.☆304Updated 6 years ago
- BluePill: Neutralizing Anti-Analysis Behavior in Malware Dissection (Black Hat Europe 2019, IEEE TIFS 2020)☆125Updated 3 years ago
- Bootkit for Windows Sandbox to disable DSE/PatchGuard.☆276Updated 6 months ago
- Analyze patches in a process☆251Updated 3 years ago
- A PE (Portable Executable) packer with Huffman Compression and Xor encryption.☆57Updated 3 years ago
- ☆134Updated last month
- My notes while studying Windows exploitation☆187Updated last year
- Tutorial on solving a VM based CrackMe.☆66Updated 4 years ago