cristeigabriel / re-sysinternals-suite
Code from process of reversing Sysinternals Suite for educational purposes, with videos to associate them
☆48Updated last year
Alternatives and similar repositories for re-sysinternals-suite:
Users that are interested in re-sysinternals-suite are comparing it to the libraries listed below
- An x64dbg plugin which helps make sense of long C++ symbols☆59Updated last year
- Windows kernel driver template for cmkr and llvm-msvc.☆34Updated last year
- Reimplement CreateProcessInternalW via Windows 10 20H1+/Windows 11 Base on NtCreateUserProcess-Post☆54Updated 6 months ago
- Integration of Microsoft Warbird with the MSVC compiler☆95Updated last year
- Finding Truth in the Shadows☆88Updated 2 years ago
- Detours implementation (x64/x86) which used only ntdll import☆90Updated 9 months ago
- SetWinEventHook Sample☆46Updated last year
- Header-only C++ library for producing PE files.☆31Updated last year
- Elevate arbitrary MSR writes to kernel execution.☆32Updated last year
- Implementation of an export address table protection mitigation, like Export Address Filtering (EAF)☆97Updated last year
- A post-processing script for TinyTracer☆38Updated last year
- This x64dbg plugin allows you to upload your sample to Malcore and view the results.☆33Updated last year
- ZeroImport is a lightweight and easy to use C++ library for Windows Kernel Drivers. It allows you to hide any import in your kernel drive…☆48Updated last year
- Load dll with undocumented functions and debug symbols☆47Updated 7 months ago
- Hook all callbacks which are registered with LdrRegisterDllNotification☆84Updated 2 years ago
- ☆106Updated 2 years ago
- Example of building an application verifer DLL☆45Updated 9 months ago
- Easy encrypt/decrypt data with TPM☆25Updated last year
- Proof-of-concept game using VBS enclaves to protect itself from cheating☆39Updated 4 months ago
- PoC exploit for HP Hardware Diagnostic's EtdSupp driver☆50Updated last year
- ☆70Updated 2 years ago
- Report and exploit of CVE-2024-21305.☆34Updated last year
- Remote Thread Detection with a Kernel Driver☆28Updated last month
- A Binary Ninja plugin to detect Themida, WinLicense and Code Virtualizer's obfuscated code locations.☆75Updated 7 months ago
- A manual PE mapping implementation, aka reflective loader☆18Updated 2 years ago
- Compileable POC of namazso's x64 return address spoofer.☆51Updated 4 years ago
- Collaboration platform for reverse engineering tools.☆39Updated 2 months ago
- Helper Script to convert a Windbg dumped structure (using the 'dt' command) into a C structure. It creates dummy structs for you if neede…☆26Updated last year