spoof return address
☆84Apr 28, 2023Updated 3 years ago
Alternatives and similar repositories for spoofcall
Users that are interested in spoofcall are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- ZwProcessHollowing is a x64 process hollowing project which uses direct systemcalls, dll unhooking and RC4 payload decryption☆98Mar 23, 2023Updated 3 years ago
- ☆191May 20, 2022Updated 4 years ago
- Research of modifying exported function names at runtime (C/C++, Windows)☆18May 28, 2024Updated 2 years ago
- ☆110Aug 21, 2024Updated 2 years ago
- ☆29Aug 27, 2025Updated last year
- Proton VPN Special Offer - Get 70% off • AdSpecial partner offer. Trusted by over 100 million users worldwide. Tested, Approved and Recommended by Experts.
- Block any Process to open HANDLE to your process , only SYTEM is allowed to open handle to your process ,with that you can avoid remote m…☆172Apr 27, 2023Updated 3 years ago
- This tool will allow you to spoof the return addresses of your functions as well as system functions.☆585Nov 12, 2022Updated 3 years ago
- A PoC implementation for spoofing arbitrary call stacks when making sys calls (e.g. grabbing a handle via NtOpenProcess)☆602Apr 8, 2025Updated last year
- Compile-time, Usermode + Kernelmode, safe and lightweight string crypter library for C++11+☆842Jun 3, 2021Updated 5 years ago
- This POC provides the possibilty to execute x86 shellcode in form of a .bin file based on x86 inline assembly☆20Apr 17, 2023Updated 3 years ago
- Kernel dwm render☆177Oct 10, 2023Updated 3 years ago
- Exploitation of process killer drivers☆206Oct 17, 2023Updated 3 years ago
- Standard Kernel Library for Windows manipulation in C++☆223Jun 18, 2025Updated last year
- A reimplementation of Cobalt Strike's Beacon Object File (BOF) Loader☆73Mar 6, 2026Updated 7 months ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- A PoC for adding NtContinue to CFG allowed list in order to make Ekko work in a CFG protected process☆114Aug 29, 2022Updated 4 years ago
- Another approach of Threadless injection discovered by @_EthicalChaos_ in c that loads a module into the target process and stomps it, an…☆189Aug 2, 2023Updated 3 years ago
- A simple NtUserGetAsyncKeyState wrapper☆42Sep 28, 2022Updated 4 years ago
- Use hardware breakpoints to spoof the call stack for both syscalls and API calls☆205Jun 6, 2024Updated 2 years ago
- An x64 binary executing code that's not inside of it.☆17Feb 28, 2023Updated 3 years ago
- ☆43Feb 18, 2025Updated last year
- yet another sleep encryption thing. also used the default github repo name for this one.☆67May 11, 2023Updated 3 years ago
- Kernel driver that .text hooks a syscall in dxgkrnl.sys which can be called from our user-mode client to send instructions like rpm/wpm a…☆238Dec 16, 2022Updated 3 years ago
- PE obfuscator with Evasion in mind☆211Apr 25, 2023Updated 3 years ago
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- 从MmPfnData中枚举进程和页目录基址☆230Aug 18, 2023Updated 3 years ago
- (WIP) A Recursive UDRL leveraging smelly_vx's Feverdream trick.☆19Sep 3, 2025Updated last year
- Example driver on how to use SKLib☆85Nov 20, 2024Updated last year
- Exploitation of echo_driver.sys☆170Sep 16, 2023Updated 3 years ago
- Improved version of EKKO by @5pider that Encrypts only Image Sections☆124Feb 13, 2023Updated 3 years ago
- Bypass LSA protection using the BYODLL technique☆181Sep 21, 2024Updated 2 years ago
- Identify and exploit leaked handles for local privilege escalation.☆113Jun 19, 2023Updated 3 years ago
- This novel way of using NtQueueApcThreadEx by abusing the ApcRoutine and SystemArgument[0-3] parameters by passing a random pop r32; ret …☆268Apr 29, 2023Updated 3 years ago
- Inline syscalls made for MSVC supporting x64 and WOW64☆195Aug 12, 2026Updated 2 months ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Unknowncheats Magically Optimized Tidy Mapper using nvaudio☆169Jun 11, 2024Updated 2 years ago
- This is the combination of multiple evasion techniques to evade defenses. (Dirty Vanity)☆50May 8, 2024Updated 2 years ago
- Encypting the Heap while sleeping by hooking and modifying Sleep with our own sleep that encrypts the heap☆247Aug 2, 2023Updated 3 years ago
- Plantronics Desktop Hub LPE☆37May 15, 2024Updated 2 years ago
- A Patchless AMSI Bypass Technique using VEH²☆33Jun 22, 2025Updated last year
- Windows Research Kernel☆43May 16, 2026Updated 5 months ago
- Threadless Process Injection using remote function hooking.☆824Sep 4, 2024Updated 2 years ago