fortiguard-lion / anti-dll-hijacking

Related projects: ⓘ

• changeofpace / Remote-Process-Cookie-for-Windows-7
  Obtain remote process cookies by performing a brute-force attack on ntdll.RtlDecodePointer using known pointer encodings.
  ☆21Updated 7 years ago
• ekknod / REM
  ☆11Updated this week
• fdiskyou / InsideWindowsDebugging
  ☆17Updated this week
• NtRaiseHardError / Providence
  Kernel-mode file scanner
  ☆17Updated 6 years ago
• mgeeky / prc_xchk
  User-mode process cross-checking utility intended to detect naive malware hiding itself by hooking IAT/EAT.
  ☆18Updated 8 years ago
• kernelm0de / Process_Doppelganging
  ☆12Updated this week
• codingtest / windows_hotpatch
  reverse win7 32bit hotpatch implement
  ☆9Updated 10 years ago
• alex9191 / ZeroBank-ring0-bundle
  ☆24Updated this week
• tandasat / ListWorkItems
  Lists work items being queued currently.
  ☆12Updated 9 years ago
• wirepair / Ninko
  PIN Tool for monitoring calls and writes from obfuscated code.
  ☆26Updated 5 years ago
• lololosys / TitanHideWindbgPlugin-
  ☆14Updated 7 years ago
• AntiRootkit / BDArkit
  just an lite AntiRootkit for interesting
  ☆23Updated 8 years ago
• tandasat / CVE-2014-0816
  CVE-2014-0816
  ☆24Updated 7 years ago
• k0keoyo / try_exploit
  ☆10Updated 7 years ago
• markjandrews / CodeMachineCourse
  ☆19Updated this week
• sin5678 / wow64hook
  wow64 syscall filter
  ☆13Updated 9 years ago
• lxt1045 / FileLogger
  ☆11Updated 7 years ago
• dbghlpr / dbghlpr
  ☆25Updated this week
• codingtest / EMET
  reversed emet tool
  ☆24Updated 11 years ago
• ethobis / mfd
  파일시스템 미니필터 드라이버 (교육용 코드)
  ☆6Updated 5 years ago
• zer0fl4g / OllyCallstack
  simple plugin for lastest olly versions to display the callstack
  ☆15Updated 11 years ago
• EvilKnight1986 / Simrep
  windows kernel File redirection
  ☆18Updated 10 years ago
• apriorit / antirootkit-anti-splicer
  The project is a demo solution for one of the anti-rootkit techniques aimed on overcoming splicers
  ☆34Updated 7 years ago
• mq1n / FunctionValidator
  ☆11Updated this week
• after1990s / InjectSolution
  ☆11Updated 9 years ago
• tandasat / hyperplatform_log_parser
  User-mode program parsing logs created by HyperPlatform
  ☆18Updated 8 years ago
• IgorKorkin / AllMemProTestBed
  Legal access: The driver and console app to demonstrate the basic memory access in kernel mode
  ☆9Updated 6 years ago
• ghonsa / DeviceDmp
  Windows device tree walker
  ☆15Updated 6 years ago
• Mirraz / regparser
  Windows registry files interactive viewer
  ☆9Updated 7 years ago
• alex9191 / KernelModeMonitor
  ☆31Updated this week