Teq2 / SEH-Over-VEH

Related projects ⓘ

Alternatives and complementary repositories for SEH-Over-VEH

• Cr4sh / PTBypass-PoC
  Bypassing code hooks detection in modern anti-rootkits via building faked PTE entries.
  ☆73Updated 13 years ago
• d366 / DarkMMap
  Manual PE image mapper
  ☆61Updated 11 years ago
• georgenicolaou / HeavenInjector
  Simple proof of concept code for injecting libraries on 64bit processes from a 32bit process
  ☆93Updated 6 years ago
• MeeSong / Sunstrider
  Analyze PatchGuard
  ☆53Updated 6 years ago
• alexvogt91 / NetDriver
  kernel-mode TDI client which can send and receive HTTP requests
  ☆55Updated 6 years ago
• vol4ok / libsplice
  Library for kernel and user mode splicing for Windows (x86 and x64).
  ☆62Updated 12 years ago
• ajkhoury / Windbg2Struct
  Takes a Windbg dumped structure (using the 'dt' command) and formats it into a C structure
  ☆33Updated 4 months ago
• SouhailHammou / KernelSymbolsHelper
  Retrieve pointers to undocumented kernel functions and offsets to members within undocumented structures to use in your driver by using t…
  ☆53Updated 5 years ago
• nanoric / pkn
  core of pkn game hacking project. Including mainly for process management, memory management, and DLL injecttion. Also PE analysis, windo…
  ☆64Updated 5 years ago
• johnsonjason / Remote-Thread-Executor
  Code injection by hijacking threads in Windows 32-bit applications
  ☆43Updated 6 years ago
• IgorKorkin / HypervisorsDetection
  This is the first software system, which can detect a stealthy hypervisor and calculate several nested ones even under countermeasures.
  ☆83Updated 9 years ago
• 0ffffffffh / system_call_hook_win10_1903
  This is the P.O.C source for hooking the system calls on Windows 10 (1903) using it's dynamic trace feature weakness
  ☆51Updated 5 years ago
• can1357 / safe_capcom
  Capcom wrapper with safety in mind.
  ☆79Updated 6 years ago
• SHA-MRIZ / DisplayMiniportHooking
  ☆46Updated 3 years ago
• Rat431 / ColdHide
  (DEPRECATED) A simple anti-anti debug library for Windows
  ☆29Updated 4 years ago
• ajkhoury / Errata1337
  ☆66Updated 3 years ago
• idkwim / frookSINATRA
  POC of sysenter x64 LSTAR MSR hook
  ☆38Updated 10 years ago
• stevemk14ebr / CompileTime-String-Encryption
  C++ 17 compile time string encryption supporting vs2010-2019
  ☆73Updated 4 years ago
• SamLarenN / CapcomDKOM
  My take on the capcom driver vulnerability
  ☆26Updated 7 years ago
• luciouskami / RemoveFlagTest
  Another method to anti ThreadHideFromDebugger
  ☆34Updated 5 years ago
• JustasMasiulis / remote_memory
  A simple library which provides a way to read and write the memory of other processes
  ☆50Updated 6 years ago
• lldre / handle_exploration
  Figuring out the cause of a handle downgrade
  ☆23Updated last year
• namazso / r0akmap
  r0akmap is a PoC driver manual mapper based on r0ak
  ☆39Updated 6 years ago
• POPFD / HypervisorBase
  A library for intel VT-x hypervisor functionality supporting EPT shadowing.
  ☆48Updated 3 years ago
• kkent030315 / NtSymbol
  Resolve DOS MZ executable symbols at runtime
  ☆93Updated 3 years ago
• wbenny / avmext
  Anti-Anti-VM solution via Windows Driver
  ☆54Updated 6 years ago
• Synestraa / Highcall-Library
  usermode standalone kernel interface
  ☆110Updated 6 years ago
• changeofpace / PE-Header-Dump-Utilities
  This x64dbg plugin adds several commands for dumping PE header information by address.
  ☆60Updated 7 years ago
• adrianyy / x64-syscall
  x64 syscall caller in C++.
  ☆84Updated 6 years ago