codereversing / manualenum

Related projects: ⓘ

• codereversing / process_replacement
  Run one process as another under Windows
  ☆11Updated 2 years ago
• codereversing / undocumented_kernel
  Call undocumented native functions in the windows kernel
  ☆5Updated 2 years ago
• codereversing / sehveh_hook
  Hooking functions with structured and vectored exception handling
  ☆8Updated 2 years ago
• codereversing / heapdiff
  Diffing process heaps
  ☆15Updated 2 years ago
• codereversing / vtable_hook
  Hooking vtables
  ☆10Updated 2 years ago
• codereversing / undocumented_veh
  Reverse engineering AddVectoredExceptionHandler
  ☆3Updated 2 years ago
• codereversing / x64_remotecall
  Perform remote calls in x64
  ☆7Updated 2 years ago
• codereversing / debugger
  Sample debugger for x86 and x64
  ☆4Updated 2 years ago
• codereversing / guardpage_hook
  Hooking functions with guard pages
  ☆8Updated 2 years ago
• wirepair / Ninko
  PIN Tool for monitoring calls and writes from obfuscated code.
  ☆26Updated 5 years ago
• changeofpace / Remote-Process-Cookie-for-Windows-7
  Obtain remote process cookies by performing a brute-force attack on ntdll.RtlDecodePointer using known pointer encodings.
  ☆21Updated 7 years ago
• sam-b / win-driver-tools
  A couple of little tools I've made for working with Windows Drivers
  ☆15Updated 8 years ago
• fdiskyou / InsideWindowsDebugging
  ☆17Updated this week
• kysam / NhoVirtualizer
  A simple native code virtualizer for 32-bit Windows PE
  ☆14Updated 8 years ago
• owerosu / packerPE32
  Simple PE packer with RtlCompressBuffer
  ☆21Updated 9 years ago
• codereversing / apicall_replacement
  An idea in hooking APIs by replacing calls that lead to them
  ☆1Updated 2 years ago
• exp-sky / MemoryProtection
  微软7月布丁增加内存延迟释放机制
  ☆11Updated 10 years ago
• Microwave89 / injector
  Code Injector Using Code Caves
  ☆14Updated 9 years ago
• tandasat / CVE-2014-0816
  CVE-2014-0816
  ☆24Updated 7 years ago
• codereversing / api_monitor
  Hook APIs and send data back to another process with Google Protobufs
  ☆2Updated 2 years ago
• mq1n / FunctionValidator
  ☆11Updated this week
• kernelm0de / Process_Doppelganging
  ☆12Updated this week
• alex9191 / KernelModeMonitor
  ☆31Updated this week
• AlephNull314 / AbsoluteZero
  Anti-AV compilation
  ☆42Updated 10 years ago
• Mirraz / regparser
  Windows registry files interactive viewer
  ☆9Updated 7 years ago
• codereversing / disassembler
  Extremely minimal linear/recursive disassembler example
  ☆12Updated 2 years ago
• nopper / maltrace
  Maltrace is a simple syscall tracer for Windows implemented through the use of PIN.
  ☆23Updated 11 years ago
• k0keoyo / try_exploit
  ☆10Updated 7 years ago
• ajkhoury / Dude-Loader
  Class implementation of PowerLoader injection technique
  ☆29Updated 7 years ago
• mgeeky / prc_xchk
  User-mode process cross-checking utility intended to detect naive malware hiding itself by hooking IAT/EAT.
  ☆18Updated 8 years ago