dennisbabkin / SigRemover

Related projects: ⓘ

• SandboxEscaper / msihijacker
  ☆31Updated this week
• namazso / PEDiffGen
  Subtract one PE file from another!
  ☆19Updated 2 years ago
• hfiref0x / RpcView
  (This is a fork used primarily to submit patches into upstream repository) RpcView is a free tool to explore and decompile Microsoft RPC …
  ☆17Updated last year
• sterrasec / genpatch
  genpatch is IDA plugin that generates a python script for patching binary
  ☆30Updated 8 months ago
• securesean / Shim-Process-Scanner
  Windows x64 Process Scanner to detect application compatability shims
  ☆37Updated 5 years ago
• wolk-1024 / CrossInject
  x86/x64 dll injector
  ☆28Updated 2 years ago
• NoMercy-ac / SystemHealthCheck
  Windows system repair tool
  ☆17Updated 3 years ago
• zodiacon / InfStudio
  INF Studio for easier working with driver installation files
  ☆36Updated 10 months ago
• MahmoudZohdy / Anti-Analysis-DebuggerInjection
  Anti-Analysis technique, trick the debugger by Hiding events from it.
  ☆18Updated 3 years ago
• pr0tean / TelemetrySourcerer-patched
  Tiny driver patch to allow kernel callbacks to work on Win10 21h1
  ☆31Updated 2 years ago
• zodiacon / AccessMask
  ☆18Updated 5 years ago
• hasherezade / libpeconv_and_detours_tpl
  A template for projects using both libPeConv and MS Detours
  ☆13Updated last year
• d35ha / DumpPE
  Dump mapped PE files from memory to the disk
  ☆17Updated 5 years ago
• 7eRoM / elam
  A Practical example of ELAM (Early Launch Anti-Malware)
  ☆27Updated 2 years ago
• ryan-weil / Code-Cave
  Injects position-dependent code into a code cave in an executable file, and applies relocations.
  ☆18Updated last year
• gmh5225 / Driver-SoulExtraction
  SoulExtraction is a windows driver library for extracting cert information in windows drivers
  ☆20Updated last year
• DownWithUp / WarbirdExamples
  An example of how to use Microsoft Windows Warbird technology
  ☆24Updated last year
• R4YVEN / DriverTimestampFaker
  Fake Timestamps of Driver Certificates while keeping validity.
  ☆16Updated 3 years ago
• secana / CertDump
  Dump certificates from PE files in different formats
  ☆36Updated 8 months ago
• d35ha / xPE
  Simple library to handle PE files loading, relocating, get/set data, ..., in addition to process handling
  ☆30Updated 5 years ago
• ORCx41 / DynamicDllLoader
  ☆11Updated this week
• Fyyre / proxy_dll
  Taking advantage of CRT initialization, to get away with hooking protected applications
  ☆41Updated last year
• Jasper1467 / WindowsDefender_Rebuild
  An attempt at reversing WindowsDefender
  ☆19Updated 5 months ago
• Harvester57 / CodeIntegrity-DriverBlocklist
  ☆19Updated this week
• h311d1n3r / LetsHook
  A Windows API hooking library !
  ☆30Updated 2 years ago
• Xienim / Delphi-Kawaii
  Delphi-Kawaii is a plugin for Ida Pro.
  ☆16Updated last year
• worawit / malk
  Demonstrate calling a kernel function and handle process creation callback against HVCI
  ☆46Updated last year
• am0nsec / vxlib
  C Header Only Library for Virii
  ☆9Updated 3 years ago
• gabriellandau / CISpotter
  Code Integrity Violation Spotter
  ☆16Updated 3 months ago
• 0xMegaByte / COM-Explained
  ☆27Updated last year