ctxis / capemon
CAPE monitor DLLs
☆39Updated 5 years ago
Alternatives and similar repositories for capemon:
Users that are interested in capemon are comparing it to the libraries listed below
- PCAUSA Rawether for Windows Local Privilege Escalation☆38Updated 7 years ago
- PoC for Bypassing UM Hooks By Bruteforcing Intel Syscalls☆39Updated 9 years ago
- A tool to help malware analysts tell that the sample is injecting code into other process.☆76Updated 9 years ago
- Anti-technique Codes, Detection of Anti-technique codes☆38Updated 11 years ago
- Hansel - a simple but flexible search for IDA☆26Updated 5 years ago
- Analysis PE file or Shellcode☆49Updated 8 years ago
- ☆22Updated 4 years ago
- A demo implementation of a well-known technique used by some malware to evade userland hooking, using my library: libpeconv.☆19Updated 6 years ago
- ☆33Updated 7 years ago
- Malware Analysis, Anti-Analysis, and Anti-Anti-Analysis☆45Updated 7 years ago
- Two tools used during our analysis of the Microsoft binary injection mitigation implemented in Edge TH2.☆53Updated 8 years ago
- ☆45Updated 6 years ago
- DLL Injection Library & Tools☆72Updated 8 years ago
- PoC for detecting and dumping process hollowing code injection☆51Updated 6 years ago
- Code injection via delay load libraries☆34Updated 7 years ago
- The Minimalistic x86/x64 API Hooking Library for Windows☆32Updated 6 years ago
- Extract OLEv1 objects from RTF files by instrumenting Word☆51Updated 5 years ago
- Modified edition of cuckoomon☆48Updated 6 years ago
- ☆43Updated 6 years ago
- Anti-AV compilation☆42Updated 11 years ago
- PoC for detecting and dumping code injection (built and extended on UnRunPE)☆56Updated 6 years ago
- Shellcode emulator written with Unicorn Framework With Process Dump Emulation Environment☆119Updated 4 years ago
- Handy scripts to speed up malware analysis☆35Updated last year
- Telsy CTI Research Team☆57Updated 4 years ago
- Public repository for HEVD exploits☆20Updated 6 years ago
- ransomware_begone☆42Updated 8 years ago
- Supporting Files on my analysis of the malware designated hdroot.☆59Updated 7 years ago
- Enumerate Windows Defender threat families and dump their names according category☆88Updated 5 years ago
- Ring3 Rootkit Backdoor.☆41Updated 9 years ago
- A dirty IDAPython script to dump windows system call number/name pairs as JSON☆37Updated 8 years ago