Source files for my posts
☆17Jun 20, 2023Updated 3 years ago
Alternatives and similar repositories for Blog-Lab
Users that are interested in Blog-Lab are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- ☆33Dec 22, 2020Updated 5 years ago
- research revolving the windows filtering platform callout mechanism☆42May 26, 2024Updated 2 years ago
- 正确解析 _HEAP_VS_***符号 ,支持在最新win11 24h2 运行,替换windbg自带的!pool命令☆17Nov 30, 2024Updated last year
- A research project about Windows notify routines.☆38Jul 31, 2020Updated 6 years ago
- freeBokuLoader fork which targets and frees Metsrv's initial reflective DLL package☆35Mar 28, 2023Updated 3 years ago
- Bare Metal GPUs on DigitalOcean Gradient AI • AdPurpose-built for serious AI teams training foundational models, running large-scale inference, and pushing the boundaries of what's possible.
- A kernel mode Windows rootkit in development.☆46Dec 31, 2021Updated 4 years ago
- a windows kernel keylogger that works☆20Feb 12, 2024Updated 2 years ago
- Dll hijack -- just one macro☆13Jul 3, 2023Updated 3 years ago
- Nice try reading NTDLL from disk, nerd.☆19Apr 18, 2022Updated 4 years ago
- Windows NT port of 'Main is usually a function. So then when is it not?'☆28Mar 11, 2024Updated 2 years ago
- Various shell code I have written☆17Oct 9, 2020Updated 6 years ago
- Port of Mandiant ShellcodeHashes plugin from IDA to BinaryNinja☆11Jul 24, 2024Updated 2 years ago
- Simple project that demonstrates how an ETW consumer can be created just by using NTDLL☆154Feb 23, 2019Updated 7 years ago
- Hooking Heavens Gate in a weekend☆12Jan 1, 2022Updated 4 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Some drivers I've written while solving exercises from Practical Reverse Engineering☆15Jan 9, 2022Updated 4 years ago
- Code Integrity Violation Spotter☆17Jun 11, 2024Updated 2 years ago
- Unchain AMSI by patching the provider’s unmonitored memory space☆88Nov 24, 2022Updated 3 years ago
- A memory-based evasion technique which makes shellcode invisible from process start to end.☆17Aug 14, 2023Updated 3 years ago
- An advanced DKOM for drivers with "DRIVER_OBJECT"☆23Feb 19, 2023Updated 3 years ago
- ☆16Apr 18, 2023Updated 3 years ago
- Right-To-Left Override POC☆36Mar 21, 2022Updated 4 years ago
- A repository filled with ideas to break/detect direct syscall techniques☆25Apr 21, 2022Updated 4 years ago
- An example code of CiGetCertPublisherName☆15Mar 24, 2022Updated 4 years ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- Detect the SCI in windows.☆12Mar 23, 2017Updated 9 years ago
- Demonstration of triggering non-maskable interrupts using nt&hal API on windows.☆10Jun 27, 2022Updated 4 years ago
- Simple command line tool to enumerate loaded WFP callout drivers☆12Feb 2, 2024Updated 2 years ago
- Repo that holds random POCs☆57Mar 16, 2026Updated 7 months ago
- Windows system repair tool☆18Jun 2, 2021Updated 5 years ago
- Source code on the 1.44MB 3.5 floppy accompanying the Windows NT File System Internals book.☆20Jul 31, 2019Updated 7 years ago
- Code snippets to add on top of cobalt strike sleep mask to achieve patchless hook on AMSI and ETW☆87Mar 19, 2023Updated 3 years ago
- PoC for the CVE-2021-20837 : RCE in MovableType☆18Oct 26, 2021Updated 5 years ago
- A crappy hook on SpAcceptLsaModeContext that prints incoming auth attempts. WIP☆36Jul 27, 2021Updated 5 years ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- 《黑客免杀攻防》一书中的C++壳☆15Apr 12, 2022Updated 4 years ago
- hooking KiUserApcDispatcher☆26Apr 3, 2017Updated 9 years ago
- Proof-of-Concept software for detecting AV/EDR hooks in Windows libraries.☆40May 12, 2022Updated 4 years ago
- ☆19Oct 31, 2022Updated 3 years ago
- Null-free shellcode for running calc.exe on Windows x64☆14Mar 24, 2024Updated 2 years ago
- Pinjectra is a C/C++ OOP-like library that implements Process Injection techniques (with focus on Windows 10 64-bit)☆16Sep 4, 2020Updated 6 years ago
- Demo to show how write ALPC Client & Server using native Ntdll.dll syscalls.☆21Jan 25, 2022Updated 4 years ago