christianshub / process-injection-guardLinks
Signature scanner and API hooks to detect malicious process injection
☆27Updated 2 years ago
Alternatives and similar repositories for process-injection-guard
Users that are interested in process-injection-guard are comparing it to the libraries listed below
Sorting:
- Debug Print viewer (user and kernel)☆66Updated last year
- A class to gather information about a process, its threads and modules.☆24Updated 5 years ago
- X86/X64 Hardware Breakpoint Manager☆41Updated 4 years ago
- UnknownField is a tool based clang that obfuscating the order of fields to protect your C/C++ game or code.☆44Updated 2 years ago
- A Windows API hooking library !☆31Updated 2 years ago
- A simple password-based PE encryptor for Windows 32-bit executables.☆52Updated 6 months ago
- ☆38Updated 2 months ago
- c++ implementation of windows heavens gate☆68Updated 4 years ago
- Windows driver template, using C++20 & cmake & GithubActions☆22Updated 11 months ago
- Process Creation, Image Load and Thread Creation Notification☆13Updated last year
- Elevate arbitrary MSR writes to kernel execution.☆37Updated last year
- Lightweight x86-64 disassembling library☆43Updated 2 years ago
- Sample for Creating a new kernel object type and supporting API☆25Updated 10 months ago
- Bypassing kernel patch protection runtime☆20Updated 2 years ago
- Function hooks in Windows NT Kernel☆24Updated 4 years ago
- A packed & protected Module Loader and more, for 64-bit Windows☆29Updated 4 years ago
- Small project to generate fake DLLs based on an executable's import table☆23Updated 5 years ago
- Binary DisASseMbler☆23Updated 2 years ago
- Library for linking multiple PE\PE + files to one☆52Updated last year
- Windows kernel driver template for cmkr and llvm-msvc.☆35Updated last year
- Analysing and defeating PatchGuard universally☆35Updated 4 years ago
- A library with four different methods to execute shellcode in a process☆27Updated 5 years ago
- Learn Winapi in this Repo with examples, to understand its abstraction in reverse engineering for Windows.☆10Updated 2 years ago
- windows kernelmode driver to inject dll into each and every process and perform systemwide function hooking☆54Updated 2 years ago
- A poc that abuses Enclave☆38Updated 2 years ago
- Small class to parse debug info from PEs, download their respective PDBs from the Microsoft Public Symbol Server and calculate RVAs of fu…☆44Updated 2 years ago
- Single header library to simplify the usage of direct syscalls. x64/x86☆12Updated 2 years ago
- Black Signature Driver☆24Updated last year
- Collaboration platform for reverse engineering tools.☆40Updated 6 months ago
- SetWinEventHook Sample☆48Updated last year