codereversing / undocumented_kernel

Related projects: ⓘ

• codereversing / manualenum
  Enumerate process modules manually
  ☆8Updated 2 years ago
• codereversing / sehveh_hook
  Hooking functions with structured and vectored exception handling
  ☆8Updated 2 years ago
• codereversing / debugger
  Sample debugger for x86 and x64
  ☆4Updated 2 years ago
• codereversing / undocumented_veh
  Reverse engineering AddVectoredExceptionHandler
  ☆3Updated 2 years ago
• codereversing / process_replacement
  Run one process as another under Windows
  ☆11Updated 2 years ago
• codereversing / x64_remotecall
  Perform remote calls in x64
  ☆7Updated 2 years ago
• codereversing / guardpage_hook
  Hooking functions with guard pages
  ☆8Updated 2 years ago
• codereversing / vtable_hook
  Hooking vtables
  ☆10Updated 2 years ago
• codereversing / api_monitor
  Hook APIs and send data back to another process with Google Protobufs
  ☆2Updated 2 years ago
• codereversing / heapdiff
  Diffing process heaps
  ☆15Updated 2 years ago
• codereversing / apicall_replacement
  An idea in hooking APIs by replacing calls that lead to them
  ☆1Updated 2 years ago
• owerosu / packerPE32
  Simple PE packer with RtlCompressBuffer
  ☆21Updated 9 years ago
• killvxk / ShellTool
  Shell Tool for BIOS Developer
  ☆9Updated 7 years ago
• Nukem9 / VMWareClient
  Reverse engineered vmware workstation code to aid in kernel debugging.
  ☆14Updated 8 years ago
• mgeeky / prc_xchk
  User-mode process cross-checking utility intended to detect naive malware hiding itself by hooking IAT/EAT.
  ☆18Updated 8 years ago
• kysam / NhoVirtualizer
  A simple native code virtualizer for 32-bit Windows PE
  ☆14Updated 8 years ago
• changeofpace / Remote-Process-Cookie-for-Windows-7
  Obtain remote process cookies by performing a brute-force attack on ntdll.RtlDecodePointer using known pointer encodings.
  ☆21Updated 7 years ago
• zer0fl4g / OllyCallstack
  simple plugin for lastest olly versions to display the callstack
  ☆15Updated 11 years ago
• alex9191 / KernelModeMonitor
  ☆31Updated this week
• wirepair / Ninko
  PIN Tool for monitoring calls and writes from obfuscated code.
  ☆26Updated 5 years ago
• yogendersolanki91 / Kernel-Driver-Example
  Some of example code that I have collected while learning
  ☆10Updated 7 years ago
• ajkhoury / Dude-Loader
  Class implementation of PowerLoader injection technique
  ☆29Updated 7 years ago
• pezcode / realign
  PE rebuilder, based on yoda's realigndll
  ☆11Updated 12 years ago
• fdiskyou / InsideWindowsDebugging
  ☆17Updated this week
• DeviceObject / rk2017
  ☆13Updated 7 years ago
• sin5678 / wow64hook
  wow64 syscall filter
  ☆13Updated 9 years ago
• ekknod / REM
  ☆11Updated this week
• ycscaly / Windows-Kernel-Research
  A project dedicated towards researching the Windows operating system's kernel mode enviornment.
  ☆8Updated 8 years ago
• dbghlpr / dbghlpr
  ☆25Updated this week
• DeDf / HyperVisor
  ☆13Updated 8 years ago