buzzer-re / BulletTrainLinks
A manual PE mapping implementation, aka reflective loader
☆19Updated 3 years ago
Alternatives and similar repositories for BulletTrain
Users that are interested in BulletTrain are comparing it to the libraries listed below
Sorting:
- ZeroImport is a lightweight and easy to use C++ library for Windows Kernel Drivers. It allows you to hide any import in your kernel drive…☆48Updated 2 years ago
- ntoskrnl .data hooks for UM-KM communication☆51Updated last year
- DSE & PG bypass via BYOVD attack☆66Updated 4 months ago
- Demystifying PatchGuard is a comprehensive analysis of Microsoft's security feature called PatchGuard, which is designed to prevent unaut…☆129Updated 2 years ago
- A simple tool to assemble shellcode ready to be copy-pasted into code☆71Updated 3 years ago
- ☆47Updated 9 months ago
- Compileable POC of namazso's x64 return address spoofer.☆50Updated 5 years ago
- hidden_syscall - syscaller without using syscall instruction in code☆62Updated 2 years ago
- PAGE_GUARD based hooking library☆52Updated 3 years ago
- Create stealthy, inline, EPT-like hooks using SMAP and SMEP☆59Updated last year
- PoC kernel to usermode injection☆89Updated last year
- windows rootkit☆59Updated last year
- Recursive and arbitrary code execution at kernel-level without a system thread creation☆155Updated 2 years ago
- Translate virtual addresses to physical addresses from usermode.☆60Updated last year
- Experiment with PAGE_GUARD protection to hide memory from other processes☆52Updated last year
- POC Hook of nt!HvcallCodeVa☆53Updated 2 years ago
- C++ macro for x64 programs that breaks ida hex-rays decompiler tool.☆129Updated last year
- Obfuscate calls to imports by patching in stubs☆71Updated 4 years ago
- C/C++ antidebugging library for Windows☆42Updated 2 weeks ago
- CVE-2022-3699 with arbitrary kernel code execution capability☆70Updated 2 years ago
- Custom GetProcAddress, GetModuleHandleA and some dbghelp.dll functions☆86Updated 6 years ago
- X86 Packer with Portable Executable compatibility.☆61Updated 2 months ago
- A tool for detecting manual/direct syscalls in x86 and x64 processes using Nirvana Hooks.☆115Updated 3 years ago
- Load dll with undocumented functions and debug symbols☆47Updated last year
- Allows you to find the use of ScyllaHide, if your program will debug and restore hooking functions bytes.☆26Updated 6 years ago
- Dynamically generated obfuscated jumps and/or function calls☆38Updated 2 years ago
- A modern, mod independent open source cheat for Enemy Territory☆69Updated 2 weeks ago
- Binary rewriter for 64-bit PE files.☆88Updated last year
- TS-Changer - Forces the machine in/out of TestSigning Mode at runtime.☆65Updated 2 years ago
- A devirtualization engine for Themida.☆101Updated last year