Alternatives and similar repositories for TcpInterceptionAndModifying

Users that are interested in TcpInterceptionAndModifying are comparing it to the libraries listed below

• veil-ivy / kapc_injector
  kernel to user mode APC injector
  ☆44Updated 3 years ago
• 0mWindyBug / MinifilterHook
  silence file system monitoring components by hooking their minifilters
  ☆57Updated last year
• Idov31 / UdpInspector
  Listing UDP connections with remote address without sniffing.
  ☆29Updated last year
• Flawww / NtSyscaller
  Manually perform syscalls without going through any external API or DLL.
  ☆18Updated 2 years ago
• Broihon / StartRoutine
  A library with four different methods to execute shellcode in a process
  ☆27Updated 5 years ago
• ch3rn0byl / Gremlins
  ☆14Updated last year
• buzzer-re / BulletTrain
  A manual PE mapping implementation, aka reflective loader
  ☆19Updated 2 years ago
• zodiacon / MalDevWorkshopWebinar
  Demo from the Malware Analysis and Development Webinar
  ☆20Updated last year
• ch3rn0byl / WinDbg-Extensions
  ☆18Updated 4 years ago
• XaFF-XaFF / ZwProcessHollowing
  ZwProcessHollowing is a x64 process hollowing project which uses direct systemcalls, dll unhooking and RC4 payload decryption
  ☆84Updated 2 years ago
• ProcessusT / PsNotifRoutineUnloader
  This script is used to unload PsSetCreateProcessNotifyRoutineEx, PsSetCreateProcessNotifyRoutine, PsSetLoadImageNotifyRoutine and PsSetCr…
  ☆63Updated last year
• 0mWindyBug / KeystrokeSniffer
  a windows kernel keylogger that works
  ☆20Updated last year
• Reijaff / offensive_c
  ☆42Updated 2 years ago
• AmitMoshel1 / PatchGuardEncryptorDriver
  An improved version of Patch Guard that I implemented, that includes integrity checks and other protection mechanisms I added.
  ☆63Updated last month
• maziland / StackBombing
  Next gen process injection technique
  ☆53Updated 4 years ago
• xalicex / Get-DLL-and-Function-Addresses
  GetModuleHandle (via PEB) and GetProcAddress (via EAT) like
  ☆32Updated 3 years ago
• jdu2600 / Etw-SyscallMonitor
  Monitors ETW for security relevant syscalls maintaining the set called by each unique process
  ☆78Updated 2 years ago
• AlionGreen / apc-injection
  Process Injection: APC Injection
  ☆32Updated 4 years ago
• connormcgarr / EATGuard
  Implementation of an export address table protection mitigation, like Export Address Filtering (EAF)
  ☆100Updated last year
• DebugPrivilege / WindowsAP1
  Code samples that serve as references for Windows API functions
  ☆31Updated 11 months ago
• XaFF-XaFF / MBR-Overwrite-with-custom-message
  Overwrite MBR and add own custom message
  ☆17Updated 5 years ago
• alfarom256 / drivers_and_shit
  ☆59Updated 2 years ago
• loneicewolf / KernelMode-Code
  2022 Updated Kernelmode-Code
  ☆31Updated last year
• 7eRoM / elam
  A Practical example of ELAM (Early Launch Anti-Malware)
  ☆32Updated 3 years ago
• shaygitub / windows-rootkit
  windows rootkit
  ☆59Updated last year
• hasherezade / SweetDreams
  Implementation of Advanced Module Stomping and Heap/Stack Encryption
  ☆10Updated last year
• 1hAck-0 / zeroimport
  ZeroImport is a lightweight and easy to use C++ library for Windows Kernel Drivers. It allows you to hide any import in your kernel drive…
  ☆48Updated 2 years ago
• benheise / bootkit
  UEFI bootkit: Hardware Implant. In-Progress
  ☆15Updated 3 years ago
• nnot09 / direct-syscall
  A simple example on how to initiate a direct syscall on WoW64
  ☆11Updated 7 years ago
• Sherman0236 / XorData
  A C++17 framework designed to enable obfuscation of constants, variables, and strings.
  ☆25Updated last year