batteryshark / stfu_wow64
A Generic WOW64 Process Blocker
☆14Updated 3 years ago
Alternatives and similar repositories for stfu_wow64:
Users that are interested in stfu_wow64 are comparing it to the libraries listed below
- Demonstrate the new FileDispositionInfoEx behavior☆14Updated 7 years ago
- Using Undocumented NTDLL Functions to Read/Write/Delete File☆18Updated 4 years ago
- Code Integrity Violation Spotter☆16Updated 8 months ago
- Subtract one PE file from another!☆20Updated 3 years ago
- automates exploits using ROP chains, using ntdll-scraper☆16Updated 2 years ago
- Easily hook WIN32 x64 functions☆18Updated last week
- KernelBugTest☆15Updated 6 years ago
- XPN's RpcEnum but based on IDA instead of Ghidra☆21Updated 5 years ago
- Windows x86 Hardware Breakpoint class for Windows >Vista☆22Updated 8 years ago
- Currently proof-of-concept☆16Updated 3 years ago
- Using Thread Description To Hide Shellcodes☆14Updated 2 years ago
- ☆16Updated 10 years ago
- Example/starter code for custom Windows application compatibility shims☆32Updated 4 years ago
- Windows x64 Process Scanner to detect application compatability shims☆37Updated 6 years ago
- Simple library to handle PE files loading, relocating, get/set data, ..., in addition to process handling☆31Updated 5 years ago
- Analysis and Modification Tool for Executables☆16Updated 5 years ago
- hooking KiUserApcDispatcher☆24Updated 7 years ago
- ☆14Updated 5 years ago
- Basic utilities for executing, reading and writing 64-bit data in a 32-bit WoW64 process☆17Updated 2 years ago
- A POC for Windows Extension Host hooking☆22Updated 5 years ago
- ☆18Updated 5 years ago
- A benign application used to demonstrate an EDR detection. This version is procedural (i.e., not object-oriented).☆1Updated 2 years ago
- vmware-backdoor☆33Updated 3 years ago
- Enumerate the DLLs/Modules using NtQueryVirtualMemory☆32Updated 9 years ago
- Static library and headers for linking your software with ntdll.dll☆32Updated 5 years ago
- Windows CIFS/SMB packet generation and SMB networking library☆11Updated 4 years ago
- Self-Loading Registration Free COM Functions☆11Updated 5 years ago
- Create a C++ PE which loads an XTEA-crypted .NET PE shellcode in memory.☆16Updated 6 years ago
- Collection of IDA Pro/Hex-Rays configs, scripts, and plugins☆23Updated 4 years ago
- Use to generate DLL through Visual Studio☆18Updated 7 years ago