guitmz / nastyLinks
Reverse text segment x64 ELF infector written in Assembly
☆20Updated 4 years ago
Alternatives and similar repositories for nasty
Users that are interested in nasty are comparing it to the libraries listed below
Sorting:
- Abusing exceptions for code execution.☆113Updated 2 years ago
- An example of hijacking the dynamic linker with a custom interpreter who loads and executes modular viruses☆66Updated 3 years ago
- A Python script to download PDB files associated with a Portable Executable (PE)☆127Updated 11 months ago
- vulnerability in zam64.sys, zam32.sys allowing ring 0 code execution. CVE-2021-31727 and CVE-2021-31728 public reference.☆91Updated 4 years ago
- An attempt to restore and adapt to modern Win10 version the 'Rootkit Arsenal' original code samples☆74Updated 3 years ago
- In line function hooking LKM rootkit☆52Updated 5 years ago
- How to set up 2 VirtualBox VM to debug kernel driver using windbg☆57Updated 3 years ago
- ☆163Updated 4 years ago
- Hooking the GDT - Installing a Call Gate. POC for Rootkit Arsenal Book Second Edition (version 2022)☆73Updated 2 years ago
- ☆72Updated 2 years ago
- This x64dbg plugin allows you to upload your sample to Malcore and view the results.☆36Updated 2 years ago
- Local OXID Resolver (LCLOR) : Research and Tooling☆37Updated 4 years ago
- IOCTLpus can be used to make DeviceIoControl requests with arbitrary inputs (with functionality somewhat similar to Burp Repeater).☆95Updated 4 years ago
- MalUnpack companion driver☆99Updated last year
- Implementation of Advanced Module Stomping and Heap/Stack Encryption☆10Updated 2 years ago
- A collection of tools, source code, and papers researching Windows' implementation of CET.☆86Updated 5 years ago
- Do you want to use x64dbg instead of immunity debugger? oscp eCPPTv2 buffer overflow exploits pocs☆90Updated 2 years ago
- A novel technique to communicate between threads using the standard ETHREAD structure☆115Updated 4 years ago
- Windows Kernel Programming Experiments☆85Updated 3 years ago
- A PE parser written in C++ which does not uses OOP. Helpful if you want to learn about PE parsing.☆18Updated 2 years ago
- a PE Loader and Windows API tracer. Useful in malware analysis.☆143Updated 3 years ago
- Report and exploit of CVE-2023-36427☆90Updated 2 years ago
- A code parser for C-Style header files that lets you to parse function's prototypes and data types used in their parameters.☆94Updated 3 years ago
- A multi-staged malware that contains a kernel mode rootkit and a remote system shell.☆75Updated 4 years ago
- VinCSS Reverse Engineering, Malware Analysing Tools & Ultilities☆27Updated 4 years ago
- ☆14Updated 4 years ago
- PyKD DLLs for x86 and x64 platforms☆18Updated 2 years ago
- GarbageMan is a set of tools for analyzing .NET binaries through heap analysis.☆118Updated 2 years ago
- Simple project using syscalls (via Syswhispers2) to execute MessageBox shellcode.☆75Updated 4 years ago
- Binary Ninja plugin for exploring Structured Exception Handlers☆82Updated last year