PELock / starter
A small utility to run raw code chunks in the executable memory area.
☆14Updated 9 years ago
Related projects ⓘ
Alternatives and complementary repositories for starter
- Debugger checks in 3 ways☆20Updated 6 years ago
- Remote PE reflective injection with a simple reflective loader☆29Updated 5 years ago
- Analysis and Modification Tool for Executables☆16Updated 5 years ago
- Static library and headers for linking your software with ntdll.dll☆30Updated 4 years ago
- ☆18Updated 5 years ago
- A Portable Executable (PE) Format poster in A1 59,4 x 84,1 cm format, including almost all of the structures from PE/PE32+ format (with c…☆19Updated last year
- Headers for linking your software with ntdll.dll☆15Updated 4 years ago
- Enter Product Key Volatile Environment LPE☆11Updated 2 years ago
- An example of PE hollowing injection technique☆22Updated 5 years ago
- Create a C++ PE which loads an XTEA-crypted .NET PE shellcode in memory.☆15Updated 6 years ago
- r0ak ("roak") is the Ring 0 Army Knife -- A Command Line Utility To Read/Write/Execute Ring Zero on for Windows 10 Systems☆26Updated 6 years ago
- r0ak ("roak") is the Ring 0 Army Knife -- A Command Line Utility To Read/Write/Execute Ring Zero on for Windows 10 Systems☆27Updated 6 years ago
- Windows x64 Process Scanner to detect application compatability shims☆36Updated 6 years ago
- User-mode process cross-checking utility intended to detect naive malware hiding itself by hooking IAT/EAT.☆18Updated 8 years ago
- Code Injection technique written in cpp language☆31Updated 6 years ago
- Windows hidden thread suspend POC with code injection☆12Updated 7 years ago
- Collection of structures, prototype and examples for Microsoft Macro Assembler (MASM) x64.☆16Updated 4 years ago
- Proof of concept headless GUI DLL☆12Updated 3 years ago
- Reflective DLL Injection style process infector☆19Updated 6 years ago
- Kernel (Ring0) - SSDT unhook driver☆13Updated 6 years ago
- Dump mapped PE files from memory to the disk☆17Updated 5 years ago
- Decrypt Wireless Passwords On Windows☆13Updated 4 years ago
- Simple PE packer with RtlCompressBuffer☆21Updated 9 years ago
- Simple library to handle PE files loading, relocating, get/set data, ..., in addition to process handling☆30Updated 5 years ago
- ☆10Updated 3 years ago
- Zerokit shared code☆16Updated 5 years ago
- Simple command line version of Sysinternals WinObj. Currently just lists object names and types given an object manager directory.☆19Updated last year
- Infects PE files with a shellcode☆15Updated 6 years ago