batteryshark / stfu_wow64
A Generic WOW64 Process Blocker
☆14Updated 3 years ago
Related projects ⓘ
Alternatives and complementary repositories for stfu_wow64
- Subtract one PE file from another!☆19Updated 3 years ago
- automates exploits using ROP chains, using ntdll-scraper☆16Updated 2 years ago
- XPN's RpcEnum but based on IDA instead of Ghidra☆21Updated 5 years ago
- Code Integrity Violation Spotter☆17Updated 5 months ago
- Example/starter code for custom Windows application compatibility shims☆31Updated 3 years ago
- Dump PDB Symbols including support for Bochs Debugging Format (with wine support)☆14Updated last year
- Currently proof-of-concept☆16Updated 2 years ago
- Static library and headers for linking your software with ntdll.dll☆30Updated 4 years ago
- genpatch is IDA plugin that generates a python script for patching binary☆31Updated 11 months ago
- A Binary Ninja plugin to deobfuscate Themida, WinLicense and Code Virtualizer 3.x's mutation-based obfuscation.☆21Updated 3 months ago
- ☆18Updated 5 years ago
- Easily hook WIN32 x64 functions☆17Updated 2 weeks ago
- Simple library to handle PE files loading, relocating, get/set data, ..., in addition to process handling☆30Updated 5 years ago
- Using Undocumented NTDLL Functions to Read/Write/Delete File☆18Updated 3 years ago
- Using Thread Description To Hide Shellcodes☆13Updated 2 years ago
- ☆12Updated 2 years ago
- My try to implement a virtual CPU in C☆19Updated last year
- Resources from my journey into Windows binary exploitation☆22Updated 5 years ago
- Process Hollowing Packer☆25Updated 7 years ago
- Enumerate the DLLs/Modules using NtQueryVirtualMemory☆33Updated 9 years ago
- A POC for Windows Extension Host hooking☆22Updated 5 years ago
- Dump mapped PE files from memory to the disk☆17Updated 5 years ago
- Windows x64 Process Scanner to detect application compatability shims☆36Updated 6 years ago
- ☆11Updated 2 years ago