ayoubfaouzi / awesome-virtualization
☆17Updated 6 years ago
Alternatives and similar repositories for awesome-virtualization:
Users that are interested in awesome-virtualization are comparing it to the libraries listed below
- ☆20Updated 5 years ago
- A demo implementation of a well-known technique used by some malware to evade userland hooking, using my library: libpeconv.☆19Updated 7 years ago
- Windows x64 Process Scanner to detect application compatability shims☆37Updated 6 years ago
- An API Monitor based on Instrumentation☆43Updated 7 years ago
- Debugger checks in 3 ways☆19Updated 7 years ago
- Windbg extension that allows you analyze Control Flow Guard map☆34Updated 3 years ago
- The project is a demo solution for one of the anti-rootkit techniques aimed on overcoming splicers☆34Updated 8 years ago
- OpenHIPS prevents exploitation of Windows systems☆35Updated 12 years ago
- User-mode process cross-checking utility intended to detect naive malware hiding itself by hooking IAT/EAT.☆19Updated 9 years ago
- Headers for linking your software with ntdll.dll☆15Updated 4 years ago
- Dumps information about all the callback objects found in a dump file and the functions registered for them☆35Updated 4 years ago
- ☆11Updated 4 years ago
- ☆22Updated 4 years ago
- A wrapper for capstone for bearparser☆14Updated 2 years ago
- ASProtect reverse engineering & analysis WinDbg extension☆22Updated 4 years ago
- Static library and headers for linking your software with ntdll.dll☆32Updated 5 years ago
- A ready-made template for a project based on libpeconv.☆47Updated 2 months ago
- Code Injector Using Code Caves☆14Updated 9 years ago
- ☆22Updated 4 years ago
- A small library helping to parse commandline parameters (for C/C++)☆57Updated last year
- A POC for Windows Extension Host hooking☆22Updated 5 years ago
- Dump mapped PE files from memory to the disk☆19Updated 5 years ago
- DirectNtApi - simple method to make ntapi function call without importing or walking export table. Work under Windows 7, 8 and 10☆52Updated last year
- Kernel mode windows NT API logger☆22Updated 5 years ago
- Zerokit shared code☆16Updated 6 years ago
- r0ak ("roak") is the Ring 0 Army Knife -- A Command Line Utility To Read/Write/Execute Ring Zero on for Windows 10 Systems☆26Updated 6 years ago
- Data and structures regarding the research done on WdFilter☆12Updated 5 years ago
- ☆21Updated 3 years ago
- PoC for detecting and dumping process hollowing code injection☆51Updated 6 years ago
- Code Injection technique written in cpp language☆31Updated 7 years ago