ayoubfaouzi / awesome-virtualization
☆17Updated 6 years ago
Alternatives and similar repositories for awesome-virtualization:
Users that are interested in awesome-virtualization are comparing it to the libraries listed below
- ☆18Updated 5 years ago
- ASProtect reverse engineering & analysis WinDbg extension☆22Updated 4 years ago
- A set of small utilities, helpers for PIN tracers☆31Updated last year
- Windbg extension that allows you analyze Control Flow Guard map☆34Updated 3 years ago
- DirectNtApi - simple method to make ntapi function call without importing or walking export table. Work under Windows 7, 8 and 10☆52Updated last year
- A demo implementation of a well-known technique used by some malware to evade userland hooking, using my library: libpeconv.☆19Updated 6 years ago
- Dumps information about all the callback objects found in a dump file and the functions registered for them☆35Updated 4 years ago
- Simple command line version of Sysinternals WinObj. Currently just lists object names and types given an object manager directory.☆19Updated last year
- Windows x64 Process Scanner to detect application compatability shims☆37Updated 6 years ago
- A small library helping to parse commandline parameters (for C/C++)☆55Updated last year
- Neutralize KEPServerEX anti-debugging techniques☆31Updated 2 years ago
- ☆22Updated 4 years ago
- r0ak ("roak") is the Ring 0 Army Knife -- A Command Line Utility To Read/Write/Execute Ring Zero on for Windows 10 Systems☆26Updated 6 years ago
- A POC for Windows Extension Host hooking☆22Updated 5 years ago
- Ammyy v3 Source Code leak , with ❤️ <3☆37Updated 8 years ago
- ☆33Updated 3 years ago
- User-mode process cross-checking utility intended to detect naive malware hiding itself by hooking IAT/EAT.☆19Updated 9 years ago
- Miscellaneous old Exploit code and PoCs☆15Updated 5 months ago
- A ready-made template for a project based on libpeconv.☆46Updated last month
- A small utility to run raw code chunks in the executable memory area.☆14Updated 10 years ago
- Engine for communication with remote kernel debugger (KD, WinDbg) from drivers and applications☆36Updated 11 years ago
- Simple library to handle PE files loading, relocating, get/set data, ..., in addition to process handling☆32Updated 5 years ago
- Static library and headers for linking your software with ntdll.dll☆32Updated 5 years ago
- Simple tool for unpacking packed/protected malware executables.☆32Updated 13 years ago
- Debugger checks in 3 ways☆18Updated 7 years ago
- findLoop - find possible encryption/decryption or compression/decompression code☆26Updated 5 years ago
- APIInfo Plugin (x86) - A Plugin For x64dbg☆50Updated 6 years ago
- Use WinDBG to trace the Windows API calls of any Portable Executable file☆30Updated 7 years ago
- WinXPSP2.Cermalus on stereoids, supporting all 32 bits Windows version. Windows Kernel Virus stuff for noobs☆17Updated last year
- With xshellex you can paste any kind of c-shellcode strings in x64dbg, ollydbg & immunity debugger☆39Updated last year