MalUnpack companion driver
☆97Jun 17, 2024Updated 2 years ago
Alternatives and similar repositories for mal_unpack_drv
Users that are interested in mal_unpack_drv are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Dynamic unpacker based on PE-sieve☆844Apr 14, 2026Updated 6 months ago
- A set of small utilities, helpers for PIN tracers☆40Feb 15, 2026Updated 8 months ago
- Small visualizator for PE files☆70Sep 20, 2023Updated 3 years ago
- Python wrappers for mal_unpack☆37Sep 19, 2023Updated 3 years ago
- A helper utility for creating shellcodes. Cleans MASM file generated by MSVC, gives refactoring hints.☆190Apr 22, 2025Updated last year
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Transacted Hollowing - a PE injection technique, hybrid between ProcessHollowing and ProcessDoppelgänging☆609Mar 8, 2024Updated 2 years ago
- A wrapper for capstone for bearparser☆16Oct 8, 2025Updated last year
- Bypasses for Windows kernel callbacks PatchGuard protection☆44Aug 15, 2021Updated 5 years ago
- A template for projects using both libPeConv and MS Detours☆16Oct 5, 2025Updated last year
- A ready-made template for a project based on libpeconv.☆55Apr 18, 2026Updated 6 months ago
- GarbageMan is a set of tools for analyzing .NET binaries through heap analysis.☆121Apr 8, 2023Updated 3 years ago
- ☆29Nov 14, 2022Updated 3 years ago
- A more stealthy variant of "DLL hollowing"☆369Mar 8, 2024Updated 2 years ago
- Resolve DOS MZ executable symbols at runtime☆94Nov 12, 2021Updated 4 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Simple Demo of using Windows Hypervisor Platform☆29Jul 14, 2025Updated last year
- Yet another variant of Process Hollowing☆475Jul 31, 2025Updated last year
- All Nt Syscall and W32k Syscall in one asm, include, and call it!☆58Nov 4, 2021Updated 4 years ago
- An experimental dynamic malware unpacker based on Intel Pin and PE-sieve☆64Jun 9, 2026Updated 4 months ago
- Utility to remove digital code signature from binary PE files in Windows.☆21Apr 25, 2021Updated 5 years ago
- Collection of structures, prototype and examples for Microsoft Macro Assembler (MASM) x64.☆16Aug 18, 2020Updated 6 years ago
- Parsers for custom malware formats ("Funky malware formats")☆97Jan 8, 2022Updated 4 years ago
- Advanced driver monitoring utility.☆220Jul 8, 2026Updated 3 months ago
- A years-old exploit of a local EoP vulnerability in Kingsoft Antivirus KWatch Driver version 2009.3.17.77.☆38Mar 16, 2022Updated 4 years ago
- Bare Metal GPUs on DigitalOcean Gradient AI • AdPurpose-built for serious AI teams training foundational models, running large-scale inference, and pushing the boundaries of what's possible.
- Analysing and defeating PatchGuard universally☆34Nov 4, 2020Updated 5 years ago
- ☆24Feb 3, 2021Updated 5 years ago
- Plugin for x64dbg to disable parallel loading of dependencies☆20Sep 3, 2022Updated 4 years ago
- A simple and universal .NET proxy remover☆10Jun 14, 2020Updated 6 years ago
- A kernel mode Windows rootkit in development.☆46Dec 31, 2021Updated 4 years ago
- A windows kernel driver to Block symbolic link exploit used for privilege escalation.☆15Jul 30, 2020Updated 6 years ago
- Set of antianalysis techniques found in malware☆133Aug 25, 2023Updated 3 years ago
- ☆76Nov 30, 2023Updated 2 years ago
- Bypassing kernel patch protection at runtime☆22Aug 16, 2026Updated 2 months ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- A Pin Tool for tracing API calls etc☆1,713Jun 2, 2026Updated 4 months ago
- A simple tool to view important DLL Characteristics and change DEP and ASLR☆45Oct 26, 2018Updated 8 years ago
- An example code of CiGetCertPublisherName☆15Mar 24, 2022Updated 4 years ago
- Implementation of an export address table protection mitigation, like Export Address Filtering (EAF)☆114May 21, 2023Updated 3 years ago
- PoC for hiding PE exports☆67Dec 19, 2020Updated 5 years ago
- File system minifilter driver for Windows to block symbolic link attacks.☆53Dec 16, 2020Updated 5 years ago
- ☆28Jan 15, 2021Updated 5 years ago