bluesadi / Heavens-Gate
Heaven's Gate implementation in C for constructing x64 Win32 API call in x86 WoW64 processes.
☆69Updated 3 years ago
Alternatives and similar repositories for Heavens-Gate:
Users that are interested in Heavens-Gate are comparing it to the libraries listed below
- https://key08.com/index.php/2021/10/19/1375.html☆66Updated 2 years ago
- PoC: Rebuild A New Path Back to the Heaven's Gate (HITB 2021)☆103Updated 3 years ago
- sc4cpp is a shellcode framework based on C++☆88Updated 3 years ago
- Call NtCreateUserProcess directly as normal.☆68Updated 2 years ago
- Hook NtDeviceIoControlFile with PatchGuard☆105Updated 2 years ago
- 利用物理内存映射,实现虚拟内存的伪隐藏☆84Updated 2 years ago
- Quick check of NT kernel exported&unexported functions/global variable offset NT内核导出以及未导出函数+全局变量偏移速查☆93Updated 2 years ago
- ☆28Updated 6 months ago
- 大数字驱动逆向代码☆71Updated last year
- ☆20Updated 2 years ago
- Walks the CFG bitmap to find previously executable but currently hidden shellcode regions☆112Updated last year
- windows kernel pagehook☆39Updated 2 years ago
- CVE-2022-3699 with arbitrary kernel code execution capability☆69Updated 2 years ago
- spoof return address☆73Updated last year
- Windows API Call Obfuscation☆99Updated 2 years ago
- IAT-Obfuscation to make static analysis of executable harder.☆42Updated 3 years ago
- Dynamically generated obfuscated jumps and/or function calls☆35Updated last year
- bootkit驱动映射,三环进程注入加载指定模块☆12Updated 5 months ago
- Kill Protected Process Light Process (include av)☆56Updated last year
- Process Injection via Component Object Model (COM) IRundown::DoCallback().☆58Updated 2 years ago
- Example of reading process memory through kernel special APC☆103Updated last year
- Reimplement CreateProcessInternalW via Windows 10 20H1+/Windows 11 Base on NtCreateUserProcess-Post☆56Updated 7 months ago
- 内存加载DLL 支持X86和X64(Memory PELoader Support X86 and X64)☆32Updated last year
- ☆51Updated last year
- 收集常用windows版本内核文件☆32Updated last year
- ☆122Updated last year
- A tool for detecting manual/direct syscalls in x86 and x64 processes using Nirvana Hooks.☆109Updated 3 years ago
- A simple direct syscall wrapper written in C++ with compatibility for x86 and x64 programs.☆45Updated last month
- 整合Pluto-Obfuscator和goron部分混淆,移植到LLVM-16.0.x,使用NewPassManager☆121Updated last year
- An x86-64 code virtualizer for VM based obfuscation☆110Updated 3 months ago