aaaddress1 / theArkLinks
Windows x86 PE Packer In C++
☆51Updated 5 years ago
Alternatives and similar repositories for theArk
Users that are interested in theArk are comparing it to the libraries listed below
Sorting:
- ☆40Updated 8 months ago
- tool for building windows shellcode in C by MinGW☆52Updated 3 years ago
- simple compiler based on mingw to build uncrackable windows application against analysis tools☆63Updated 7 years ago
- ☆31Updated last year
- Run some secret code invisible from debugger single step.(x86 process on x64 windows only)☆25Updated 5 years ago
- POC about how to prevent windbg break☆15Updated 2 years ago
- PoC for DEF CON 26: Playing Malware Injection with Exploit thoughts☆25Updated 6 years ago
- PoC: Rebuild A New Path Back to the Heaven's Gate (HITB 2021)☆109Updated 4 years ago
- PoC: Exploit 32-bit Thread Snapshot of WOW64 to Take Over $RIP & Inject & Bypass Antivirus HIPS (HITB 2021)☆166Updated 4 years ago
- Windows API Hashes used in the malwares☆42Updated 10 years ago
- 2021 iThome 鐵人賽☆49Updated last year
- Find patterns of vulnerabilities on Windows in order to find 0-day and write exploits of 1-days. We use Microsoft security updates in ord…☆187Updated 4 years ago
- Local privilege escalation PoC exploit for CVE-2019-16098☆193Updated 5 years ago
- ☆58Updated 2 years ago
- Call 32bit NtDLL API directly from WoW64 Layer☆60Updated 4 years ago
- ☆51Updated 2 years ago
- Designed to learn OS specific anti-emulation patterns by fuzzing the Windows API.☆99Updated 5 years ago
- arbitrary kernel read/write in dbutil_2_3.sys, Proof of Concept Local Privilege Escalation to nt authority/system☆57Updated 3 years ago
- ☆163Updated 3 years ago
- An example of how x64 kernel shellcode can dynamically find and use APIs☆106Updated 5 years ago
- Yet another windows syscall library☆18Updated 5 years ago
- Reverse engineered source code of the autochk rootkit☆205Updated 5 years ago
- https://blog.f-secure.com/hiding-malicious-code-with-module-stomping/☆120Updated 5 years ago
- A PoC designed to bypass all usermode hooks in a WoW64 environment.☆150Updated 4 years ago
- Exploiting ring0 memcpy-like functionality to disable Driver Signing Enforcement (DSE)☆21Updated 5 years ago
- Windows Injection 101: from Zero to ROP (HITCON 2017)☆28Updated 7 years ago
- ☆147Updated 2 years ago
- Assembly block for hooking windows API functions.☆92Updated 6 years ago
- Convert PE files to a shellcode☆79Updated 5 years ago
- Hacker Disassembler Engine 64 Copyright (c) 2008-2009, Vyacheslav Patkov. * All rights reserved.☆50Updated 3 years ago