ajkhoury / RemoteCode-KernelLinks
Simple code generation library developed in C intended for code generation in Kernel mode
☆17Updated 3 years ago
Alternatives and similar repositories for RemoteCode-Kernel
Users that are interested in RemoteCode-Kernel are comparing it to the libraries listed below
Sorting:
- Code injection by hijacking threads in Windows 32-bit applications☆43Updated 7 years ago
- My take on the capcom driver vulnerability☆28Updated 8 years ago
- Bypassing code hooks detection in modern anti-rootkits via building faked PTE entries.☆79Updated 15 years ago
- Windows handle stealing POC with NtDuplicateObject☆41Updated 8 years ago
- A sample on how to inject a DLL from a kernel driver☆61Updated 9 years ago
- viewing page boundaries of pages with PAGE_NOACCESS protection reveals the presence of x64dbg.☆26Updated 9 years ago
- Wow64 syscall hook☆42Updated 8 years ago
- Analyze PatchGuard☆56Updated 7 years ago
- A command line tool to load and unload a device driver.☆46Updated 8 years ago
- (DEPRECATED) A simple anti-anti debug library for Windows☆30Updated 5 years ago
- Hiding x32/x64 Modules/DLLs using PEB☆62Updated 10 years ago
- Windows kernel-mode callbacks tutorial driver☆48Updated 9 years ago
- Kernel mode driver loader, injecting into the windows kernel, Rootkit. Driver injections.☆48Updated 11 years ago
- Manual PE image mapper☆66Updated 12 years ago
- MIR-Engine☆24Updated 8 years ago
- Anti-Anti-VM solution via Windows Driver☆62Updated 7 years ago
- drvtriks kernel driver for Windows 7 SP1 and 8.1 x64, that tricks around in your system.☆34Updated 8 years ago
- Class implementation of PowerLoader injection technique☆32Updated 9 years ago
- Simple header only library to change return address on current stack frame.☆22Updated 9 years ago
- Polymorphic Stub Creator☆34Updated 8 years ago
- Spoof Windows Test Signing Mode☆29Updated 7 years ago
- DLL injector that bypasses some checks for valid certificates.☆37Updated 7 years ago
- PoC of BOOST-ed _EPROCESS.VadRoot iterating☆27Updated 11 years ago
- ice9 - is anticheat based on usermode tricks and undocumented methods , builded as dll for loading trought the shibari framework☆25Updated last year
- Helper utility for debugging windows PE/PE+ loader.☆52Updated 10 years ago
- r0akmap is a PoC driver manual mapper based on r0ak☆38Updated 7 years ago
- LoadLibrary, GetModuleHandle and GetProcAddress calls for remote processes☆22Updated 11 years ago
- Currently supports injecting signed/unsigned DLLs in 64-bit processes☆62Updated 5 years ago
- NT reversal☆25Updated 7 years ago
- Dll injector POC for new handle stealing technique☆21Updated 8 years ago