biesigrr / pe-loader

Related projects: ⓘ

• Biswa96 / PDBDownloader
  Standalone program to download PDB Symbol files for debugging without WDK
  ☆71Updated 5 years ago
• Chigusa0w0 / AsusDriversPrivEscala
  ☆29Updated this week
• Teq2 / SEH-Over-VEH
  Implementation of a dispatcher for Structured Exceptions inside a Vectored Exception Handler
  ☆36Updated 4 years ago
• jnastarot / cleancall
  Library for using direct system calls
  ☆35Updated 4 years ago
• Gbps / CapcomLib
  A reflexive driver loader to bypass Windows DSE (featuring a custom PE loader)
  ☆37Updated 6 years ago
• d366 / DarkMMap
  Manual PE image mapper
  ☆59Updated 11 years ago
• ionescu007 / r0ak
  ☆28Updated 5 years ago
• 0ffffffffh / system_call_hook_win10_1903
  This is the P.O.C source for hooking the system calls on Windows 10 (1903) using it's dynamic trace feature weakness
  ☆50Updated 5 years ago
• johnsonjason / Remote-Thread-Executor
  Code injection by hijacking threads in Windows 32-bit applications
  ☆42Updated 5 years ago
• mgeeky / PE-library
  Lightweight Portable Executable parsing library and a demo peParser application.
  ☆71Updated last year
• andrew-boyarshin / LoaderWatch
  Windows 10 PE image loader (LDR) NTDLL component toolbox
  ☆40Updated 4 years ago
• SouhailHammou / KernelSymbolsHelper
  Retrieve pointers to undocumented kernel functions and offsets to members within undocumented structures to use in your driver by using t…
  ☆52Updated 5 years ago
• Rat431 / ColdHide
  (DEPRECATED) A simple anti-anti debug library for Windows
  ☆29Updated 4 years ago
• yardenshafir / SymlinkCallback
  A driver that hooks C: volume using symbolic link callback to track all FS access to the volume
  ☆100Updated 4 years ago
• repnz / windows-inspector
  A driver to intercept low level windows events
  ☆59Updated 4 years ago
• Cr4sh / PTBypass-PoC
  Bypassing code hooks detection in modern anti-rootkits via building faked PTE entries.
  ☆72Updated 13 years ago
• bb107 / RtlWow64
  c++ implementation of windows heavens gate
  ☆54Updated 3 years ago
• SinaKarvandi / x64-Driver-Inline-Assembly
  This is a simple driver with x64 inline assembly
  ☆52Updated 4 years ago
• lurumdare / ScyllaHideDetector
  ☆27Updated this week
• ajkhoury / Errata1337
  ☆64Updated 3 years ago
• kkent030315 / NtSymbol
  Resolve DOS MZ executable symbols at runtime
  ☆93Updated 2 years ago
• wbaby / win32k
  ☆79Updated this week
• MeeSong / Sunstrider
  Analyze PatchGuard
  ☆53Updated 6 years ago
• yardenshafir / cet-research
  A collection of tools, source code, and papers researching Windows' implementation of CET.
  ☆72Updated 3 years ago
• GitMirar / DriverLoader
  Small tool which loads Windows drivers with NtLoadDriver
  ☆41Updated 3 years ago
• stevemk14ebr / CompileTime-String-Encryption
  C++ 17 compile time string encryption supporting vs2010-2019
  ☆72Updated 4 years ago
• AnzeLesnik / MySyscall
  Example of hijacking system calls via function pointer tables
  ☆30Updated 3 years ago
• lldre / handle_exploration
  Figuring out the cause of a handle downgrade
  ☆24Updated last year
• h4xu3lyn / FuckPg
  Analysing and defeating PatchGuard universally
  ☆34Updated 3 years ago
• turingcompl33t / windows-internals
  Exploring Windows Internals.
  ☆58Updated 4 years ago