Alternatives and similar repositories for AuthHashCalc:

Users that are interested in AuthHashCalc are comparing it to the libraries listed below

• DownWithUp / ALPC-Example
  An example of a client and server using Windows' ALPC functions to send and receive data.
  ☆94Updated 3 weeks ago
• GoodstudyChina / APC-injection-x86-x64
  ☆66Updated 6 years ago
• mdsecactivebreach / com_inject
  ☆190Updated 2 years ago
• capt-meelo / NtCreateUserProcess
  Minimal PoC developed as discuss in https://captmeelo.com/redteam/maldev/2022/05/10/ntcreateuserprocess.html
  ☆130Updated 2 years ago
• zodiacon / sysrun
  Run any executable as SYSTEM account (no service required)
  ☆126Updated 9 months ago
• Fyyre / ntdll
  ntdll.h - compatible with MSVC 6.0, Intel C++ Compiler and MinGW. Serves as a complete replacement for Windows.h
  ☆133Updated 5 years ago
• pathtofile / PPLRunner
  Run Processes as PPL with ELAM
  ☆153Updated 2 years ago
• bb107 / RtlWow64
  c++ implementation of windows heavens gate
  ☆68Updated 4 years ago
• sgabe / SymlinkProtect
  File system minifilter driver for Windows to block symbolic link attacks.
  ☆50Updated 4 years ago
• zodiacon / winnativeapibooksamples
  Samples from my book Windows Native API programming
  ☆59Updated 6 months ago
• wbenny / EtwConsumerNT
  Simple project that demonstrates how an ETW consumer can be created just by using NTDLL
  ☆139Updated 5 years ago
• utoni / PastDSE
  DSE bypass using a leaked cert and adjusting the current clock.
  ☆145Updated 2 years ago
• DownWithUp / DynamicKernelShellcode
  An example of how x64 kernel shellcode can dynamically find and use APIs
  ☆104Updated 4 years ago
• aaaddress1 / wowGrail
  PoC: Rebuild A New Path Back to the Heaven's Gate (HITB 2021)
  ☆103Updated 3 years ago
• m417z / LdrDllNotificationHook
  Hook all callbacks which are registered with LdrRegisterDllNotification
  ☆84Updated 2 years ago
• repnz / autochk-rootkit
  Reverse engineered source code of the autochk rootkit
  ☆201Updated 5 years ago
• csandker / RPCDump
  ☆78Updated 3 years ago
• paskalian / WID_LoadLibrary
  Reverse engineering winapi function loadlibrary.
  ☆79Updated last year
• splunk / PPLinject
  Inject unsigned DLL into Protected Process Light (PPL)
  ☆18Updated 2 months ago
• gmh5225 / ntoskrnl_file_collection
  Collect various versions of ntoskrnl files
  ☆48Updated last year
• ajkhoury / ApiSet
  API Set resolver for Windows
  ☆128Updated 5 months ago
• leeqwind / PESignAnalyzer
  This program can retrieve signature information from PE files which signed by one or more certificates on Windows. Supporting multi-signe…
  ☆99Updated 2 years ago
• cs1ime / DICHook
  Hook NtDeviceIoControlFile with PatchGuard
  ☆103Updated 2 years ago
• kkent030315 / NtSymbol
  Resolve DOS MZ executable symbols at runtime
  ☆96Updated 3 years ago
• A-Normal-User / NtSocket_NtClient_NtServer
  Using NtCreateFile and NtDeviceIoControlFile to realize the function of winsock（利用NtCreateFile和NtDeviceIoControlFile 实现winsock的功能）
  ☆107Updated 2 years ago
• am0nsec / wkpe
  Windows Kernel Programming Experiments
  ☆81Updated 2 years ago
• Microwave89 / createuserprocess
  Three Tiny Examples of Directly Using Vista's NtCreateUserProcess
  ☆85Updated 9 years ago
• repnz / apc-research
  APC Internals Research Code
  ☆161Updated 4 years ago
• hMihaiDavid / addscn
  Add an empty section to a PE file
  ☆52Updated 7 years ago
• KiFilterFiberContext / warbird-hook
  Using Microsoft Warbird to automatically unpack and execute encrypted shellcode in ClipSp.sys without triggering PatchGuard
  ☆243Updated 2 years ago