crvvdev / cpp-ransomware
C\C++ Ransomware example using RSA and AES-128 with BCrypt library on Windows
☆15Updated last year
Related projects ⓘ
Alternatives and complementary repositories for cpp-ransomware
- ☆15Updated last month
- user-mode Rootkit☆98Updated 2 years ago
- Fud Runpe Av Evasion / All Av Bypass☆31Updated last year
- 🗡️ A multi-user malleable C2 framework targeting Windows. Written in C++ and Python☆40Updated 8 months ago
- ☆24Updated 7 months ago
- 💻 Windows 10 Kernel-mode rootkit☆31Updated 2 years ago
- kernel to user mode APC injector☆43Updated 2 years ago
- Research into removing strings & API call references at compile-time (Anti-Analysis)☆24Updated 5 months ago
- ☆34Updated 4 months ago
- Listing UDP connections with remote address without sniffing.☆30Updated last year
- A C++17 framework designed to enable obfuscation of constants, variables, and strings.☆26Updated last year
- Detect API Hooks☆69Updated 2 years ago
- ☆22Updated last year
- Injecting shellcode into a process memory and executing it in C#☆50Updated 2 years ago
- Next gen process injection technique☆42Updated 4 years ago
- Shellcodev is a tool designed to help and automate the process of shellcode creation.☆100Updated last year
- Antivirus killer using ring-0 kernel driver. Antivirus processes will automatically close while the killer is running.☆6Updated 2 years ago
- Thread Execution Hijacking technique☆34Updated 2 years ago
- WinApi Patcher is a straightforward tool leveraging windows API hooking to patch and modify certain behaviors in a targeted environment.☆40Updated 2 months ago
- ZwProcessHollowing is a x64 process hollowing project which uses direct systemcalls, dll unhooking and RC4 payload decryption☆78Updated last year
- Collection of source code for Polymorphic, Metamorphic, and Permutation Engines used in Malware☆25Updated 5 years ago
- a stage1 DLL loader with sleep obfuscation☆32Updated last year
- Dynamically generated obfuscated jumps and/or function calls☆33Updated last year
- A Bumblebee-inspired Crypter☆80Updated last year
- POC Ring3 Windows Rootkit (x86 / x64) - Hide processes and files☆52Updated last year
- An initial proof of concept of a bootkit based on Cr4sh's DMABackdoorBoot☆59Updated last year
- using the Recycle Bin to insure persistence☆11Updated 2 years ago
- Allows you to find the use of ScyllaHide, if your program will debug and restore hooking functions bytes.☆24Updated 5 years ago