XaFF-XaFF / WinREPL
WinREPL is a "read-eval-print loop" shell on Windows that is useful for testing/learning x86 and x64 assembly.
☆13Updated 2 years ago
Alternatives and similar repositories for WinREPL:
Users that are interested in WinREPL are comparing it to the libraries listed below
- Using Thread Description To Hide Shellcodes☆14Updated 2 years ago
- Implementation of ITaskHandler in C++☆13Updated last year
- automates exploits using ROP chains, using ntdll-scraper☆16Updated 2 years ago
- Subtract one PE file from another!☆19Updated 3 years ago
- An attempt at reversing WindowsDefender☆20Updated 3 months ago
- Learn Winapi in this Repo with examples, to understand its abstraction in reverse engineering for Windows.☆9Updated 2 years ago
- Yet another Windows DLL injector.☆38Updated 3 years ago
- A PoC to demo modifying cmdline of the child process dynamically. It might be useful against process log tracing, AV or EDR.☆38Updated 4 years ago
- XOrCryptEx lightweight C Utility/Algorithm☆11Updated 2 years ago
- Example for PagedOut!☆24Updated 5 years ago
- ☆12Updated last year
- Executes shellcode from a remote server and aims to evade in-memory scanners☆31Updated 5 years ago
- Protected Process (Light) Dump: Uses Zemana AntiMalware Engine To Open a Privileged Handle to a PP/PPL Process And Inject MiniDumpWriteDu…☆22Updated 4 years ago
- Collection of IDA helpers☆15Updated 2 years ago
- ☆15Updated this week
- Dangling COM Keys Finder☆15Updated 3 years ago
- Anti-Analysis technique, trick the debugger by Hiding events from it.☆19Updated 3 years ago
- WinXPSP2.Cermalus on stereoids, supporting all 32 bits Windows version. Windows Kernel Virus stuff for noobs☆17Updated last year
- Forked from Akayan. Windows Kernel Exploitation. Static & dynamic analysis, exploits & vuln reasearch. Mitigations bypass's, genric bug-c…☆14Updated 2 months ago
- Code Integrity Violation Spotter☆17Updated 7 months ago
- An example of how to use Microsoft Windows Warbird technology☆27Updated last year
- Demo to show how write ALPC Client & Server using native Ntdll.dll syscalls.☆21Updated 2 years ago
- ☆12Updated 3 years ago
- Reduce Dynamic Analysis Detection Rates With Built-In Unhooker, Anti Analysis Techniques, And String Obfuscator Modules.☆18Updated 2 years ago
- A kernel mode Windows rootkit in development.☆49Updated 3 years ago
- A fully compatible replacement of Windows NT NtCreateLowBoxToken syscall - precisely restored from reverse engineering☆33Updated last week