codereversing / guardpage_hook
Hooking functions with guard pages
☆8Updated 2 years ago
Related projects: ⓘ
- Hooking functions with structured and vectored exception handling☆8Updated 2 years ago
- Call undocumented native functions in the windows kernel☆5Updated 2 years ago
- Reverse engineering AddVectoredExceptionHandler☆3Updated 2 years ago
- Perform remote calls in x64☆7Updated 2 years ago
- Sample debugger for x86 and x64☆4Updated 2 years ago
- An idea in hooking APIs by replacing calls that lead to them☆1Updated 2 years ago
- Enumerate process modules manually☆8Updated 2 years ago
- PE rebuilder, based on yoda's realigndll☆11Updated 12 years ago
- Hooking vtables☆10Updated 2 years ago
- Run one process as another under Windows☆11Updated 2 years ago
- ☆13Updated 8 years ago
- Hook APIs and send data back to another process with Google Protobufs☆2Updated 2 years ago
- viewing page boundaries of pages with PAGE_NOACCESS protection reveals the presence of x64dbg.☆21Updated 7 years ago
- ☆31Updated this week
- A driverless driver that is supposed to be manually mapped, usually by using TDL exploit. The driver shows how to read/write to any proce…☆21Updated 6 years ago
- simple plugin for lastest olly versions to display the callstack☆15Updated 11 years ago
- User-mode process cross-checking utility intended to detect naive malware hiding itself by hooking IAT/EAT.☆18Updated 8 years ago
- A simple native code virtualizer for 32-bit Windows PE☆14Updated 8 years ago
- Reverse engineered vmware workstation code to aid in kernel debugging.☆14Updated 8 years ago
- find and kill injectedThreads from memory☆10Updated 8 years ago
- Dll injector POC for new handle stealing technique☆20Updated 6 years ago
- Simple program for static hooking dynamic libraries in executable application☆21Updated 10 years ago
- windows kernel File redirection☆18Updated 9 years ago
- ice9 - is anticheat based on usermode tricks and undocumented methods , builded as dll for loading trought the shibari framework☆19Updated 6 years ago
- Proof of concept headless GUI DLL☆12Updated 2 years ago
- A small library to extend the functionality of GetModuleHandle and GetProcAddress to other processes☆15Updated 4 years ago
- Contains various pintools to supplement the Intel DBI framework☆12Updated 9 years ago
- PoC of BOOST-ed _EPROCESS.VadRoot iterating☆24Updated 10 years ago
- A simple tool to help reverse engineers while dealing with obfuscated code.☆20Updated 8 years ago