ctxis / capemon
CAPE monitor DLLs
☆39Updated 5 years ago
Alternatives and similar repositories for capemon:
Users that are interested in capemon are comparing it to the libraries listed below
- ☆22Updated 4 years ago
- PCAUSA Rawether for Windows Local Privilege Escalation☆38Updated 8 years ago
- Hansel - a simple but flexible search for IDA☆26Updated 5 years ago
- PoC for Bypassing UM Hooks By Bruteforcing Intel Syscalls☆39Updated 9 years ago
- Anti-technique Codes, Detection of Anti-technique codes☆38Updated 11 years ago
- Two tools used during our analysis of the Microsoft binary injection mitigation implemented in Edge TH2.☆53Updated 8 years ago
- Malware Analysis, Anti-Analysis, and Anti-Anti-Analysis☆45Updated 7 years ago
- ☆45Updated 6 years ago
- ☆43Updated 6 years ago
- Extract OLEv1 objects from RTF files by instrumenting Word☆51Updated 5 years ago
- PoC for detecting and dumping process hollowing code injection☆51Updated 6 years ago
- A tool to help malware analysts tell that the sample is injecting code into other process.☆76Updated 9 years ago
- Shellcode emulator written with Unicorn Framework With Process Dump Emulation Environment☆120Updated 4 years ago
- DLL Injection Library & Tools☆72Updated 8 years ago
- Telsy CTI Research Team☆57Updated 4 years ago
- PoC for detecting and dumping code injection (built and extended on UnRunPE)☆56Updated 6 years ago
- Modified edition of cuckoomon☆49Updated 6 years ago
- ☆49Updated 4 years ago
- Analysis PE file or Shellcode☆49Updated 8 years ago
- public bugs/proof of concepts☆48Updated 4 years ago
- Flare-On solutions☆36Updated 5 years ago
- Resources for the workshop titled "Repacking the unpacker: Applying Time Travel Debugging to malware analysis", given at HackLu 2019☆40Updated 5 years ago
- Anti-AV compilation☆42Updated 11 years ago
- SDBbot Unpacker Python 2.7☆9Updated 4 years ago
- Gozi-MBR-rootkit Bootkit Modified☆68Updated 8 years ago
- Sample libraries to be used with IAT Patcher☆33Updated 2 years ago
- Windows Console Monitoring☆99Updated 7 years ago
- Supporting Files on my analysis of the malware designated hdroot.☆59Updated 8 years ago
- The Minimalistic x86/x64 API Hooking Library for Windows☆32Updated 6 years ago
- A tiny PoC to inject and execute code into explorer.exe with WM_SETTEXT+WM_COPYDATA+SetThreadContext☆50Updated 6 years ago