bluesadi / Heavens-GateLinks
Heaven's Gate implementation in C for constructing x64 Win32 API call in x86 WoW64 processes.
☆71Updated 3 years ago
Alternatives and similar repositories for Heavens-Gate
Users that are interested in Heavens-Gate are comparing it to the libraries listed below
Sorting:
- PoC: Rebuild A New Path Back to the Heaven's Gate (HITB 2021)☆106Updated 4 years ago
- Call NtCreateUserProcess directly as normal.☆71Updated 3 years ago
- Hook NtDeviceIoControlFile with PatchGuard☆106Updated 3 years ago
- https://key08.com/index.php/2021/10/19/1375.html☆67Updated 3 years ago
- ☆29Updated 8 months ago
- sc4cpp is a shellcode framework based on C++☆90Updated 3 years ago
- 利用物理内存映射，实现虚拟内存的伪隐藏☆83Updated 2 years ago
- Reimplement CreateProcessInternalW via Windows 10 20H1+/Windows 11 Base on NtCreateUserProcess-Post☆63Updated 9 months ago
- ☆30Updated last year
- Kill Protected Process Light Process (include av)☆56Updated last year
- Dynamically generated obfuscated jumps and/or function calls☆35Updated 2 years ago
- ☆11Updated 5 months ago
- A tool for detecting manual/direct syscalls in x86 and x64 processes using Nirvana Hooks.☆111Updated 3 years ago
- Walks the CFG bitmap to find previously executable but currently hidden shellcode regions☆118Updated 2 years ago
- PoC exploit for HP Hardware Diagnostic's EtdSupp driver☆50Updated 2 years ago
- Process Injection via Component Object Model (COM) IRundown::DoCallback().☆59Updated 2 years ago
- 整合Pluto-Obfuscator和goron部分混淆，移植到LLVM-16.0.x，使用NewPassManager☆122Updated last year
- Windows API Call Obfuscation☆104Updated 2 years ago
- This repo contains EXPs about Vulnerable Windows Driver☆45Updated last year
- Hook all callbacks which are registered with LdrRegisterDllNotification☆87Updated 2 months ago
- ksc4cpp is a shellcode framework for windows kernel based on C++☆21Updated 2 years ago
- IAT-Obfuscation to make static analysis of executable harder.☆42Updated 3 years ago
- Quick check of NT kernel exported&unexported functions/global variable offset NT内核导出以及未导出函数+全局变量偏移速查☆94Updated 2 years ago
- Finding Truth in the Shadows☆92Updated 2 years ago
- An Obfuscator-LLVM based mingw-w64 toolchain.☆39Updated 3 years ago
- bootkit驱动映射，三环进程注入加载指定模块☆13Updated 8 months ago
- CVE-2022-3699 with arbitrary kernel code execution capability☆70Updated 2 years ago
- ☆200Updated 3 years ago
- 大数字驱动逆向代码☆71Updated last year
- Windows Kernel Knowledge && Collect Resources on the wire && Nothing innovation by myself &&☆55Updated 3 weeks ago