Headers for linking your software with ntdll.dll
☆15Nov 4, 2020Updated 6 years ago
Alternatives and similar repositories for NTLib
Users that are interested in NTLib are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- ☆15Dec 16, 2020Updated 5 years ago
- ☆12May 31, 2023Updated 3 years ago
- Library for using direct system calls☆35Jan 30, 2025Updated last year
- 新的注入方式☆11Sep 30, 2018Updated 8 years ago
- Demos and presentation from SECArmy Village Grayhat 2020☆36Mar 15, 2023Updated 3 years ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- A Windows native DLL injection library written in C# that supports several methods of injection.☆11Dec 17, 2018Updated 7 years ago
- Phantom DLL Hollowing method implemented in modmap☆18Jun 9, 2021Updated 5 years ago
- A PoC to demo modifying cmdline of the child process dynamically. It might be useful against process log tracing, AV or EDR.☆40Dec 31, 2020Updated 5 years ago
- Call 32bit NtDLL API directly from WoW64 Layer☆61Nov 18, 2020Updated 5 years ago
- ☆12Jul 27, 2020Updated 6 years ago
- ☆15Feb 29, 2020Updated 6 years ago
- Static library and headers for linking your software with ntdll.dll☆39Dec 16, 2019Updated 6 years ago
- Windows System Programming Experiments☆223Jun 13, 2022Updated 4 years ago
- Simple remote administration tool. Written in c++ and MASM.☆18May 16, 2018Updated 8 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Monitor ETW events for Windows process mitigation policies, with stack traces☆30Oct 7, 2022Updated 4 years ago
- This is a tutorial and introduction to Reflective DLL Injection + reading outputs of injected dll using named pipes.☆20Feb 8, 2025Updated last year
- all the fun stuff that windows has to offer☆12Jan 23, 2021Updated 5 years ago
- Windows CIFS/SMB packet generation and SMB networking library☆12Aug 25, 2020Updated 6 years ago
- Experimental: Windows .text section compare - disk versus memory☆15Jan 21, 2015Updated 11 years ago
- Hijack Printconfig.dll to execute shellcode☆104Jan 15, 2021Updated 5 years ago
- ☆12Oct 20, 2016Updated 10 years ago
- A library with four different methods to execute shellcode in a process☆25Mar 24, 2020Updated 6 years ago
- Code Integrity Violation Spotter☆17Jun 11, 2024Updated 2 years ago
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- Win32 API Experimental(or Extension) features☆39Nov 18, 2022Updated 3 years ago
- WORK IN PROGRESS. RAT written in C++ using Win32 API☆20Sep 12, 2019Updated 7 years ago
- Thawne is a Sentinel for your Program. A trojan that Reinfects systems. It installs itself on the system it's Executed on. After which Th…☆10Oct 13, 2020Updated 6 years ago
- C++ implementation of DOUBLEPULSAR usermode shellcode. Yet another Reflective DLL loader.☆30Nov 9, 2021Updated 4 years ago
- Shareds for kernel developement☆28Dec 23, 2013Updated 12 years ago
- Bypass UAC by abusing the Security Center CPL and hijacking a shell protocol handler☆31Jul 12, 2021Updated 5 years ago
- C++ Extended Template Library☆16Aug 10, 2026Updated 2 months ago
- Shellcode injection using debugging APIs☆19Jan 13, 2014Updated 12 years ago
- About C# loader that copies a chunk at the time of the shellcode in memory in a suspended process, rather that all at once☆12Jul 14, 2022Updated 4 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Pseudo-malicious usermode memory artifact generator kit designed to easily mimic the footprints left by real malware on an infected Windo…☆230Mar 18, 2024Updated 2 years ago
- Runpe + DInvoke + Syscall☆19Jun 18, 2021Updated 5 years ago
- BlowBeef is a tool for analyzing WMI data.☆18Jul 26, 2021Updated 5 years ago
- Examples of Metamorphic and Polymorphic code☆36Jun 5, 2026Updated 5 months ago
- ☆37May 9, 2019Updated 7 years ago
- win32/x64 obfuscate framework☆32Apr 16, 2019Updated 7 years ago
- Analysis and Modification Tool for Executables☆18Mar 28, 2019Updated 7 years ago