A minimalistic way to spoof return addresses without using exceptions
☆21Jul 26, 2022Updated 4 years ago
Alternatives and similar repositories for Ret-Spoofing
Users that are interested in Ret-Spoofing are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- A simple way to spoof return addresses using an exception handler☆43Aug 3, 2022Updated 4 years ago
- Illustrates the concept of return address spoofing, and how it is used.☆14May 13, 2020Updated 6 years ago
- ☆40Mar 23, 2023Updated 3 years ago
- mash hypervisor host pml4☆16Jun 22, 2022Updated 4 years ago
- Hijack NotifyRoutine for a kernelmode thread☆39Jun 4, 2022Updated 4 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- LLVM Pass which inserts an opaque predicate at the end of a function, filled with junk bytes to cause IDA analysis to fail (x86_64)☆14May 11, 2025Updated last year
- C++ Alt syscall hook in 25h2 can be load by KDU☆30Feb 18, 2026Updated 8 months ago
- Basic utilities for executing, reading and writing 64-bit data in a 32-bit WoW64 process☆20Jul 8, 2022Updated 4 years ago
- PointerGuard is a proof-of-concept tool used to create 'guarded' pointers which disguise pointer addresses, monitor reads/writes, and pre…☆55May 23, 2022Updated 4 years ago
- Thats it! An Open-Source Windows UEFI Rootkit☆42Jul 19, 2025Updated last year
- Windows kernel driver that detects hypervisors by probing SIDT/LIDT edge cases, paging/TLB behaviors, privilege transitions, and timing e…☆50Mar 3, 2026Updated 7 months ago
- hooking KiUserApcDispatcher☆26Apr 3, 2017Updated 9 years ago
- ☆18Jan 11, 2026Updated 9 months ago
- ☆12Apr 7, 2022Updated 4 years ago
- GPUs on demand by Runpod - Special Offer Available • AdRun AI, ML, and HPC workloads on powerful cloud GPUs—without limits or wasted spend. Deploy GPUs in under a minute and pay by the second.
- Binary Ninja plugin to perform automated analysis of Windows drivers☆20Aug 8, 2019Updated 7 years ago
- ☆50Apr 19, 2020Updated 6 years ago
- A proof of concept demonstrating instrumentation callbacks on Windows 10 21h1 with a TLS variable to ensure all syscalls are caught.☆168Nov 14, 2021Updated 4 years ago
- Detour hooking IRQ1 ISR through IDT (Interrupt Descriptor Table)☆21Mar 16, 2026Updated 7 months ago
- Misc Windows Driver/Kernel PoCs that do not need a separate repo.☆14May 4, 2025Updated last year
- A simple ida python script to find .data ptr☆60May 6, 2023Updated 3 years ago
- A proof of concept that makes a Windows syscall look like it came from a legitimate Windows thread pool, with no trace of your own code a…☆15Jul 15, 2026Updated 3 months ago
- a minimalistic windows hypervisor for amd processors☆155Jun 30, 2022Updated 4 years ago
- The Windows Research Kernel (WRK)☆11Jan 3, 2023Updated 3 years ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- Handling C++ & __try exceptions without the need of built-in handlers.☆76Aug 28, 2021Updated 5 years ago
- semi-auto static deobfuscator for functions which is obfuscated by lazy importer.☆17Nov 27, 2024Updated last year
- .data ptr swapper for newer win32k versions. (Supports Windows 11)☆38Jan 19, 2026Updated 9 months ago
- Simple single file header for creating zero imports drivers. Can be useful for bypassing forensic memory analysis performed by anticheats…☆26Sep 25, 2026Updated last month
- A simple MmCopyMemory hook.☆38Jul 11, 2022Updated 4 years ago
- Research-focused hypervisor offering advanced tools for debugging, virtual machine introspection, and automation.☆46Jun 3, 2026Updated 4 months ago
- High-performance, AI-driven semantic analysis for the IDA Pro decompiler.☆26Nov 18, 2025Updated 11 months ago
- A demonstration of hooking into the VMProtect-2 virtual machine☆27Nov 9, 2023Updated 2 years ago
- Compileable POC of namazso's x64 return address spoofer.☆51Jun 10, 2020Updated 6 years ago
- Proton VPN Special Offer - Get 70% off • AdSpecial partner offer. Trusted by over 100 million users worldwide. Tested, Approved and Recommended by Experts.
- 正确解析 _HEAP_VS_***符号 ,支持在最新win11 24h2 运行,替换windbg自带的!pool命令☆17Nov 30, 2024Updated last year
- A Windows rootkit that turns user-land processes into Protected Processes☆30Nov 16, 2024Updated last year
- NailaoLoader: Hiding Execution Flow via Patching☆24Feb 27, 2025Updated last year
- Shellcode capable of bypassing EAF / IAF mitigations☆29Apr 11, 2023Updated 3 years ago
- havoc kaine plugin to mitigate PAGE_GUARD protected image headers using JOP gadgets☆44Aug 6, 2024Updated 2 years ago
- Small driver that uses alternative syscalls feature☆17May 9, 2024Updated 2 years ago
- Decoder for VMProtect hwids☆21Aug 1, 2022Updated 4 years ago