dsnezhkov / elfpack
☆47Updated 2 years ago
Alternatives and similar repositories for elfpack:
Users that are interested in elfpack are comparing it to the libraries listed below
- A few examples of how to trap virtual memory access on Windows.☆30Updated 4 months ago
- C# implementation to produce ROR-13 numeric hash for given function API name☆31Updated 5 years ago
- Designed to learn OS specific anti-emulation patterns by fuzzing the Windows API.☆98Updated 4 years ago
- Extract data of TTD trace file to a minidump☆28Updated last year
- A collection of shellcode hashes☆17Updated 6 years ago
- Inter-Process Communication Mechanisms☆26Updated 4 years ago
- An IDA plugin to deal with Event Tracing for Windows (ETW)☆55Updated 2 years ago
- ☆18Updated last year
- A class to emulate the behavior of NtQuerySystemInformation when passed the SystemHypervisorDetailInformation information class☆26Updated last year
- ☆68Updated 2 years ago
- ☆45Updated last month
- Winbindex bot to pull in binaries for specific releases☆48Updated last year
- Command like tool to print mitigation flags for running processes in a memory dump☆46Updated 4 years ago
- ☆24Updated last year
- Former Multi - Ring to Kernel To UserMode Transitional Shellcode For Remote Kernel Exploits☆28Updated 2 years ago
- PoC of macho loading from memory☆56Updated 5 months ago
- call gates as stable comunication channel for NT x86 and Linux x86_64☆31Updated last year
- Local OXID Resolver (LCLOR) : Research and Tooling☆35Updated 3 years ago
- ☆31Updated 4 years ago
- "An Introduction to Windows Exploit Development" is an open sourced, free Windows exploit development course I created for the Southeast …☆39Updated 5 years ago
- CVE-2024-40431+CVE-2022-25479 chain for EOP(DATA ONLY ATTACK)☆44Updated 6 months ago
- PyKD DLLs for x86 and x64 platforms☆17Updated last year
- This repository contains D-TIME: Distributed Threadless Independent Malware Execution for Runtime Obfuscation.☆35Updated 4 years ago
- Clone running process with ZwCreateProcess☆57Updated 4 years ago
- Process Injection without R/W target memory and without creating a remote thread☆18Updated 3 years ago
- ☆12Updated 6 months ago
- IOCTLpus can be used to make DeviceIoControl requests with arbitrary inputs (with functionality somewhat similar to Burp Repeater).☆88Updated 3 years ago
- Helper idapython code for reversing kmdf drivers☆72Updated 2 years ago
- Finds imports that could be exploited, still requires manual analysis.☆27Updated 2 years ago
- ☆25Updated 6 months ago