WHots / RosaryAVLinks
Lightweight Threat Detection System - (Base)
☆15Updated last year
Alternatives and similar repositories for RosaryAV
Users that are interested in RosaryAV are comparing it to the libraries listed below
Sorting:
- Hooking Heavens Gate in a weekend☆13Updated 3 years ago
- kASLR bypass technique on Intel CPUs.☆17Updated last month
- A kernel exploit leveraging NtUserHardErrorControl to elevate a thread to KernelMode and achieve arbitrary kernel R/W & more.☆30Updated 2 years ago
- A C/C++/Asm template for PIC malware☆10Updated 8 months ago
- An attempt at reversing WindowsDefender☆20Updated 8 months ago
- Shadow Rebirth - An Aggressive Outbreak Anti-Debugging Technique☆11Updated 6 months ago
- A VMWare logger using built-in backdoor.☆30Updated 8 months ago
- UEFI bootkit: Hardware Implant. In-Progress☆16Updated 3 years ago
- using the Recycle Bin to insure persistence☆12Updated 2 years ago
- Here you can find some vulnerable Windows Kernel Drivers☆15Updated 4 months ago
- An example of how to use Microsoft Windows Warbird technology☆28Updated 2 years ago
- ☆24Updated 2 years ago
- WinHvShellcodeEmulator (WHSE) is a shellcode emulator leveraging the Windows Hypervisor Platform API☆23Updated 3 years ago
- ☆21Updated 2 years ago
- ☆15Updated last week
- Tiny driver patch to allow kernel callbacks to work on Win10 21h1☆34Updated 3 years ago
- Using Thread Description To Hide Shellcodes☆14Updated 2 years ago
- ☆18Updated 4 months ago
- havoc kaine plugin to mitigate PAGE_GUARD protected image headers using JOP gadgets☆30Updated 10 months ago
- An example of Windows self-replicating malware.☆10Updated 2 years ago
- ☆11Updated 3 years ago
- A native Windows library for intercepting kernel-to-user transitions using instrumentation callbacks☆21Updated last year
- Research of modifying exported function names at runtime (C/C++, Windows)☆17Updated last year
- Some drivers I've written while solving exercises from Practical Reverse Engineering☆15Updated 3 years ago
- Phantom DLL Hollowing method implemented in modmap☆17Updated 4 years ago
- the Open Source and Pure C++ Packer for eXecutables☆21Updated 2 years ago
- A Practical example of ELAM (Early Launch Anti-Malware)☆34Updated 3 years ago
- Code injection via ZwCreateSection, ZwUnmapViewOfSection. C++ example☆17Updated 3 years ago
- Demonstrate calling a kernel function and handle process creation callback against HVCI☆55Updated 2 years ago
- ☆20Updated 5 months ago