Headers for linking your software with ntdll.dll
☆16Nov 4, 2020Updated 5 years ago
Alternatives and similar repositories for NTLib
Users that are interested in NTLib are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- ☆15Dec 16, 2020Updated 5 years ago
- ☆12May 31, 2023Updated 3 years ago
- An experimental dynamic malware unpacker based on Intel Pin and PE-sieve☆62Jun 9, 2026Updated last month
- 新的注入方式☆11Sep 30, 2018Updated 7 years ago
- Library for using direct system calls☆35Jan 30, 2025Updated last year
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- BlowBeef is a tool for analyzing WMI data.☆18Jul 26, 2021Updated 4 years ago
- Demos and presentation from SECArmy Village Grayhat 2020☆37Mar 15, 2023Updated 3 years ago
- Windows System Programming Experiments☆222Jun 13, 2022Updated 4 years ago
- A Windows native DLL injection library written in C# that supports several methods of injection.☆12Dec 17, 2018Updated 7 years ago
- Simple DLL and client app that work together to hook all the functions in WinHvPlatform.dll in order to provide logging and introspection…☆21Dec 1, 2021Updated 4 years ago
- Call 32bit NtDLL API directly from WoW64 Layer☆61Nov 18, 2020Updated 5 years ago
- A PoC to demo modifying cmdline of the child process dynamically. It might be useful against process log tracing, AV or EDR.☆40Dec 31, 2020Updated 5 years ago
- Shellcode injection using debugging APIs☆19Jan 13, 2014Updated 12 years ago
- ☆12Jul 27, 2020Updated 5 years ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- Phantom DLL Hollowing method implemented in modmap☆18Jun 9, 2021Updated 5 years ago
- ntdll.h - compatible with MSVC 6.0, Intel C++ Compiler and MinGW. Serves as a complete replacement for Windows.h☆152May 24, 2026Updated last month
- C++ implementation of DOUBLEPULSAR usermode shellcode. Yet another Reflective DLL loader.☆30Nov 9, 2021Updated 4 years ago
- Hijack Printconfig.dll to execute shellcode☆103Jan 15, 2021Updated 5 years ago
- Windows PE - TLS (Thread Local Storage) Injector in C/C++☆109Jan 3, 2021Updated 5 years ago
- Automatic DLL comment link generation and explaination of the DLL Proxying techniques☆10Aug 19, 2021Updated 4 years ago
- Static library and headers for linking your software with ntdll.dll☆38Dec 16, 2019Updated 6 years ago
- Simple tool to generate patterns and masks used to find functions in a binary without hard-coding offsets.☆14Nov 21, 2016Updated 9 years ago
- Windows CIFS/SMB packet generation and SMB networking library☆12Aug 25, 2020Updated 5 years ago
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- Bypass UAC by abusing the Security Center CPL and hijacking a shell protocol handler☆31Jul 12, 2021Updated 4 years ago
- An example of a downloader written in NodeJS.☆24Apr 17, 2021Updated 5 years ago
- ☆16Feb 29, 2020Updated 6 years ago
- PoC: Rebuild A New Path Back to the Heaven's Gate (HITB 2021)☆109May 27, 2021Updated 5 years ago
- Updated z0mbie MISTFALL engine☆17Jan 10, 2018Updated 8 years ago
- Monitor ETW events for Windows process mitigation policies, with stack traces☆30Oct 7, 2022Updated 3 years ago
- a ntdll.h head file which download from network, and fix all found problems by me.☆36May 8, 2026Updated 2 months ago
- Windows 10 kernel and ntdll internal types, directly compatible with ida.☆53Oct 14, 2018Updated 7 years ago
- Library for linking multiple PE\PE + files to one☆52Mar 16, 2024Updated 2 years ago
- Serverless GPU API endpoints on Runpod - Get Bonus Credits • AdSkip the infrastructure headaches. Auto-scaling, pay-as-you-go, no-ops approach lets you focus on innovating your application.
- Create a C++ PE which loads an XTEA-crypted .NET PE shellcode in memory.☆17Sep 29, 2018Updated 7 years ago
- ☆12Oct 20, 2016Updated 9 years ago
- Compile-time Evaluable SHA3 in C++: Permutation-based Cryptographic Hashing☆16Jun 22, 2026Updated 2 weeks ago
- https://blog.f-secure.com/hiding-malicious-code-with-module-stomping/☆127Sep 19, 2019Updated 6 years ago
- Classic DLL injection. Download dll from url and inject. Simple C++ implementation☆11Apr 16, 2022Updated 4 years ago
- ☆19Nov 26, 2020Updated 5 years ago
- POC code to crash Windows Event Logger Service☆27Oct 16, 2020Updated 5 years ago