bluesadi / Heavens-Gate
Heaven's Gate implementation in C for constructing x64 Win32 API call in x86 WoW64 processes.
☆70Updated 3 years ago
Alternatives and similar repositories for Heavens-Gate:
Users that are interested in Heavens-Gate are comparing it to the libraries listed below
- Call NtCreateUserProcess directly as normal.☆71Updated 2 years ago
- Hook NtDeviceIoControlFile with PatchGuard☆105Updated 2 years ago
- PoC: Rebuild A New Path Back to the Heaven's Gate (HITB 2021)☆104Updated 3 years ago
- https://key08.com/index.php/2021/10/19/1375.html☆66Updated 2 years ago
- sc4cpp is a shellcode framework based on C++☆88Updated 3 years ago
- 利用物理内存映射，实现虚拟内存的伪隐藏☆83Updated 2 years ago
- Reimplement CreateProcessInternalW via Windows 10 20H1+/Windows 11 Base on NtCreateUserProcess-Post☆60Updated 7 months ago
- CVE-2022-3699 with arbitrary kernel code execution capability☆70Updated 2 years ago
- Walks the CFG bitmap to find previously executable but currently hidden shellcode regions☆115Updated last year
- 大数字驱动逆向代码☆71Updated last year
- ksc4cpp is a shellcode framework for windows kernel based on C++☆22Updated 2 years ago
- ☆29Updated 7 months ago
- A tool for detecting manual/direct syscalls in x86 and x64 processes using Nirvana Hooks.☆110Updated 3 years ago
- bootkit驱动映射，三环进程注入加载指定模块☆12Updated 6 months ago
- ☆30Updated last year
- Windows API Call Obfuscation☆102Updated 2 years ago
- Enum and Remove Hook in Windows☆38Updated 4 months ago
- spoof return address☆73Updated last year
- Dynamically generated obfuscated jumps and/or function calls☆35Updated 2 years ago
- IAT-Obfuscation to make static analysis of executable harder.☆42Updated 3 years ago
- ☆65Updated 6 years ago
- Quick check of NT kernel exported&unexported functions/global variable offset NT内核导出以及未导出函数+全局变量偏移速查☆93Updated 2 years ago
- Kill Protected Process Light Process (include av)☆56Updated last year
- windows kernel pagehook☆39Updated 2 years ago
- This repo contains EXPs about Vulnerable Windows Driver☆39Updated 11 months ago
- Windows Kernel Knowledge && Collect Resources on the wire && Nothing innovation by myself &&☆55Updated 3 months ago
- A simple direct syscall wrapper written in C++ with compatibility for x86 and x64 programs.☆46Updated 2 months ago
- An x86-64 code virtualizer for VM based obfuscation☆116Updated 4 months ago
- A compact tool for detecting AV/EDR hooks in default Windows libraries.☆31Updated 2 years ago
- PoC exploit for HP Hardware Diagnostic's EtdSupp driver☆50Updated last year