aking1012 / dc20
A slightly stripped down version of RID (an exercise in learning python C-Types...some of it is a little rushed/sloppy) and a stripped down version of a function level encoder engine for C.
☆51Updated 12 years ago
Alternatives and similar repositories for dc20:
Users that are interested in dc20 are comparing it to the libraries listed below
- zer0m0n driver for cuckoo sandbox☆87Updated 8 years ago
- a program to detect reflective dll injection on a live machine☆75Updated 9 years ago
- ☆51Updated 8 years ago
- A tiny PoC to inject and execute code into explorer.exe with WM_SETTEXT+WM_COPYDATA+SetThreadContext☆50Updated 7 years ago
- Windows Console Monitoring☆99Updated 7 years ago
- CAPE monitor DLLs☆41Updated 5 years ago
- ☆115Updated 8 years ago
- A utility to use the usermode shellcode from the DOUBLEPULSAR payload to reflectively load an arbitrary DLL into another process, for use…☆118Updated 7 years ago
- PoC for detecting and dumping code injection (built and extended on UnRunPE)☆56Updated 6 years ago
- Modified edition of cuckoomon☆49Updated 6 years ago
- kernel exploitation helper class☆77Updated 8 years ago
- Reflective Polymorphism☆104Updated 6 years ago
- Anti-technique Codes, Detection of Anti-technique codes☆38Updated 11 years ago
- PoC for Bypassing UM Hooks By Bruteforcing Intel Syscalls☆39Updated 9 years ago
- public bugs/proof of concepts☆48Updated 4 years ago
- Open and generic Anti-Anti Reversing Framework. Works in 32 and 64 bits.☆64Updated 12 years ago
- The Minimalistic x86/x64 API Hooking Library for Windows☆32Updated 7 years ago
- ☆45Updated 6 years ago
- Security Research and Development Framework☆107Updated 9 years ago
- Enumerate Windows Defender threat families and dump their names according category☆90Updated 5 years ago
- A process overwriting its own PEB to make an illusion that it has been loaded from a different path.☆96Updated 3 years ago
- HackSys Extreme Vulnerable Driver - StackOverflow Exploit☆31Updated 8 years ago
- Load a Windows Kernel Driver☆92Updated 7 years ago
- Supporting Files on my analysis of the malware designated hdroot.☆59Updated 8 years ago
- libemu shim layer and win32 environment for Unicorn Engine☆71Updated 8 years ago
- Transfer EIP control to shellcode during malware analysis investigation☆75Updated 10 years ago
- ☆49Updated 5 years ago
- PCAUSA Rawether for Windows Local Privilege Escalation☆38Updated 8 years ago
- Two tools used during our analysis of the Microsoft binary injection mitigation implemented in Edge TH2.☆53Updated 8 years ago
- Analyze and attack windows applications using dll hijacking vulnerabilities☆56Updated 5 years ago