d35ha / xLogger
Simple windows API logger
☆98Updated 5 years ago
Related projects ⓘ
Alternatives and complementary repositories for xLogger
- Some research on AltSystemCallHandlers functionality in Windows 10 20H1 18999☆206Updated 5 years ago
- Resolve DOS MZ executable symbols at runtime☆93Updated 3 years ago
- File system minifilter driver for Windows to block symbolic link attacks.☆51Updated 3 years ago
- Converted phnt (Native API header files from the System Informer project) to IDA TIL, IDC (Hex-Rays).☆115Updated 2 months ago
- Anti-Debug encyclopedia contains methods used by malware to verify if they are executed under debugging. It includes the description of v…☆49Updated last year
- Ghetto user mode emulation of Windows kernel drivers.☆122Updated last month
- CallMon is an experimental system call monitoring tool that works on Windows 10 versions 2004+ using PsAltSystemCallHandlers☆129Updated 4 years ago
- APC Internals Research Code☆158Updated 4 years ago
- Small tool to convert beteween the PE alignments (raw and virtual).☆81Updated last year
- C++ library for parsing and manipulating PE files statically and dynamically.☆87Updated last year
- A ProcMon-esque tool for monitoring Windows Kernel Drivers☆53Updated 3 years ago
- Set of antianalysis techniques found in malware☆129Updated last year
- Global user-mode hooking framework, based on AppInit_DLLs. The goal is to allow you to rapidly develop hooks to inject in an arbitrary pr…☆161Updated 2 years ago
- ☆131Updated last year
- Abusing exceptions for code execution.☆107Updated last year
- MalUnpack companion driver☆92Updated 5 months ago
- An automatic tool for fixing dumped PE files☆41Updated 4 years ago
- An example of a client and server using Windows' ALPC functions to send and receive data.☆89Updated 4 years ago
- ☆120Updated last month
- IOCTLpus can be used to make DeviceIoControl requests with arbitrary inputs (with functionality somewhat similar to Burp Repeater).☆85Updated 2 years ago
- Translates WinDbg "dt" structure dump to a C structure☆126Updated 8 years ago
- ☆93Updated 3 years ago
- VM devirtualization PoC based on AsmJit and llvm☆104Updated 3 years ago
- Browse Page Tables on Windows (Page Table Viewer)☆185Updated 2 years ago
- IDA plugin for quickly copying disassembly as encoded hex bytes☆59Updated 2 years ago
- A code parser for C-Style header files that lets you to parse function's prototypes and data types used in their parameters.☆93Updated 2 years ago
- Bootkit for Windows Sandbox to disable DSE/PatchGuard.☆261Updated last month
- msdocsviewer is a simple tool that parses Microsoft's win32 API and driver documentation to be used within IDA.☆148Updated 10 months ago
- IDA Plugin that fills in missing indirect CALL & JMP target information☆115Updated last year
- Process Hollowing for 32 bit and 64 bit☆80Updated 7 years ago