guidedhacking / anti-debugging
Anti-debugging techniques on a (bad looking) Win32 application.
☆239Updated 11 months ago
Alternatives and similar repositories for anti-debugging:
Users that are interested in anti-debugging are comparing it to the libraries listed below
- X86 Mutation Engine with Portable Executable compatibility.☆479Updated 2 years ago
- Analyze patches in a process☆249Updated 3 years ago
- Debugger Anti-Detection Benchmark☆310Updated last year
- Demo proof of concept for shadow regions, and implementation of HyperDeceit.☆276Updated last year
- x64 Windows kernel code execution via user-mode, arbitrary syscall, vulnerable IOCTLs demonstration☆287Updated 2 years ago
- A x64 Windows Rootkit using SSDT or Hypervisor hook☆533Updated 2 months ago
- An Injector that can inject dll into game process protected by anti cheat using SetWindowsHookEx.☆242Updated 5 years ago
- AntiDebugging sample sources written in C++☆337Updated 6 years ago
- A library to develop kernel level Windows payloads for post HVCI era☆392Updated 3 years ago
- Manual mapper that uses PTE manipulation, Virtual Address Descriptor (VAD) manipulation, and forceful memory allocation to hide executabl…☆309Updated 3 years ago
- x86 PE Mutator☆216Updated 2 years ago
- Simple x86/x86_64 instruction level obfuscator based on a basic SBI engine☆264Updated 2 years ago
- Handle elevation DKOM against ObRegisterCallbacks☆291Updated 6 years ago
- Kernel-Mode Driver that loads a dll into every new created process that loads kernel32.dll module☆412Updated 6 years ago
- Native code virtualizer for x64 binaries☆469Updated 2 months ago
- A mapper that maps shellcode into loaded large page drivers☆260Updated 2 years ago
- Manual mapping without creating any threads, with rw only access☆730Updated 5 years ago
- Browse Page Tables on Windows (Page Table Viewer)☆195Updated 2 years ago
- This tool will allow you to spoof the return addresses of your functions as well as system functions.☆441Updated 2 years ago
- System call hook for Windows 10 20H1☆487Updated 3 years ago
- Bootkit for Windows Sandbox to disable DSE/PatchGuard.☆271Updated 5 months ago
- Rendering on external windows via hijacking thread contexts☆381Updated 4 years ago
- UEFI bootkit for driver manual mapping☆532Updated last year
- C++17 PE manualmapper☆329Updated 3 years ago
- Inline syscalls made easy for windows on clang☆694Updated 8 months ago
- Simple code to manipulate the memory of a usermode process from kernel.☆274Updated 8 years ago
- A Simple demonstration of manual dll injector☆201Updated 3 years ago
- usermode driver mapper that forcefully loads any signed kernel driver (legit cert) with a big enough section (example: .data, .rdata) to …☆406Updated 3 years ago
- Windows inline hooking tool.☆249Updated 6 years ago
- Elevate a process to be a protected process☆144Updated 5 years ago