bytecode77 / winapi-ex

Related projects: ⓘ

• NextSecurity / Gozi-MBR-rootkit
  Gozi-MBR-rootkit Bootkit Modified
  ☆68Updated 7 years ago
• NtRaiseHardError / AntiHook
  PoC designed to evade userland-hooking anti-virus.
  ☆85Updated 5 years ago
• zerosum0x0 / zeroload
  ☆34Updated this week
• 3gstudent / HiddenNtRegistry
  Use NT Native Registry API to create a registry that normal user can not query.
  ☆54Updated 6 years ago
• tophertimzen / shellcodeTester
  GUI Application in C# to run and disassemble shellcode
  ☆35Updated 7 years ago
• NtRaiseHardError / Anti-Delete
  Protects deletion of files with a specified extension using a kernel-mode driver.
  ☆73Updated 6 years ago
• iGh0st / Crypters
  Various Crypter Project
  ☆50Updated 10 years ago
• hoangprod / COMHijacker
  Persistent through COM Hijacking
  ☆20Updated 5 years ago
• bytecode77 / slui-file-handler-hijack-privilege-escalation
  Slui File Handler Hijack UAC Bypass Local Privilege Escalation
  ☆88Updated 2 years ago
• aeshes / exe_crypter
  ☆12Updated 7 years ago
• hasherezade / libpeconv_tpl
  A ready-made template for a project based on libpeconv.
  ☆40Updated last year
• ashr / netrefject
  Inject .Net payloads into other .Net assemblies on disk
  ☆61Updated 4 years ago
• realoriginal / doublepulsar-poc
  ☆44Updated this week
• hasherezade / loaderine
  A demo implementation of a well-known technique used by some malware to evade userland hooking, using my library: libpeconv.
  ☆19Updated 6 years ago
• nettitude / DLLInjection
  DLL Injection Library & Tools
  ☆71Updated 8 years ago
• NtRaiseHardError / UnRunPE
  PoC for detecting and dumping process hollowing code injection
  ☆50Updated 5 years ago
• ahixon / booty
  Bootkit for Windows 7
  ☆27Updated 10 years ago
• DiabloHorn / cliramdisk
  A reduced functionality cli client for the imdisk ram disk driver. To be used through a backdoor like meterpreter
  ☆22Updated 6 years ago
• KbaHaxor / Ammyy-v3
  Ammyy v3 Source Code leak , with ❤️ <3
  ☆36Updated 7 years ago
• homjxi0e / ReaCOM
  ReaCOM has got a lot of tools to use and is related to component object model
  ☆73Updated 4 years ago
• zerosum0x0 / ShellcodeDriver
  ☆81Updated this week
• maaaaz / mimicertz
  A minimal safe version of mimikatz to only allow the export of non-exportable Windows certificates
  ☆24Updated 5 years ago
• codecrack3 / Shortcut-Downloader
  Shortcut Downloader
  ☆11Updated 7 years ago
• deroko / SPPLUAObjectUacBypass
  ☆45Updated 6 years ago
• hacksysteam / ShellcodeOfDeath
  Shellcode Of Death
  ☆38Updated 11 years ago
• NtRaiseHardError / Dreadnought
  PoC for detecting and dumping code injection (built and extended on UnRunPE)
  ☆54Updated 5 years ago
• zodiacon / Blog
  Blog posts
  ☆30Updated 4 years ago
• apt69 / RibeyeSpecial
  medium-rare
  ☆27Updated 4 years ago
• NoviceLive / shellcoding
  Introduce you to shellcode development.
  ☆23Updated 8 years ago
• wekillpeople / bypassav-dynimp
  Bypass antivirus with dynamic import. Hide the api(s) used.
  ☆27Updated 8 years ago