hfiref0x / WubbabooMark

Related projects: ⓘ

• notpidgey / EagleVM
  Native code virtualizer for x64 binaries
  ☆355Updated this week
• Xyrem / Yumekage
  Demo proof of concept for shadow regions, and implementation of HyperDeceit.
  ☆260Updated last year
• NaC-L / Mergen
  Deobfuscation via optimization with usage of LLVM IR and parsing assembly.
  ☆308Updated last week
• VoidSec / DriverBuddyReloaded
  Driver Buddy Reloaded is an IDA Pro Python plugin that helps automate some tedious Windows Kernel Drivers reverse engineering tasks
  ☆315Updated last year
• thesecretclub / SandboxBootkit
  Bootkit for Windows Sandbox to disable DSE/PatchGuard.
  ☆251Updated 2 years ago
• gmh5225 / CallMeWin32kDriver
  Load your driver like win32k.sys
  ☆242Updated 2 years ago
• AdamOron / PatchGuardBypass
  Bypassing PatchGuard on modern x64 systems
  ☆238Updated last year
• kkent030315 / anycall
  x64 Windows kernel code execution via user-mode, arbitrary syscall, vulnerable IOCTLs demonstration
  ☆214Updated 2 years ago
• MellowNight / AetherVisor
  Memory hacking library powered by AMD SVM
  ☆290Updated last year
• Xyrem / HyperDeceit
  HyperDeceit is the ultimate all-in-one library that emulates Hyper-V for Windows, giving you the ability to intercept and manipulate oper…
  ☆353Updated last year
• nelfo / Milfuscator
  x86 PE Mutator
  ☆211Updated last year
• can1357 / NtRays
  Hex-Rays microcode plugin for automated simplification of Windows Kernel decompilation.
  ☆506Updated 3 weeks ago
• colby57 / VMP-Imports-Deobfuscator
  VMProtect 2.x-3.x x64 Import Deobfuscator
  ☆246Updated 8 months ago
• JustasMasiulis / ida_bitfields
  IDA Pro plugin to make bitfield accesses easier to grep
  ☆221Updated 5 months ago
• d35ha / xObf
  Simple x86/x86_64 instruction level obfuscator based on a basic SBI engine
  ☆238Updated last year
• VollRagm / PTView
  Browse Page Tables on Windows (Page Table Viewer)
  ☆178Updated 2 years ago
• ThatLing / limba
  compile-time control flow obfuscation using mba
  ☆172Updated last year
• Oliver-1-1 / GhostMapper
  ☆212Updated last week
• ergrelet / themida-unmutate
  Static deobfuscator for Themida, WinLicense and Code Virtualizer 3.x's mutation-based obfuscation.
  ☆202Updated last month
• jonomango / nohv
  Kernel driver for detecting Intel VT-x hypervisors.
  ☆167Updated last year
• waryas / KACE
  Emulate Drivers in RING3 with self context mapping or unicorn
  ☆299Updated 2 years ago
• mike1k / HookHunter
  Analyze patches in a process
  ☆241Updated 3 years ago
• vxlang / vxlang-page
  protector & obfuscator & code virtualizer
  ☆392Updated 2 weeks ago
• backengineering / llvm-msvc
  [WIP] A forked version of LLVM that prioritizes MSVC compatibility. This version is tailored for Windows users.
  ☆200Updated this week
• vmctx / guardian-rs
  x86-64 code/pe virtualizer
  ☆151Updated last month
• guidedhacking / anti-debugging
  Anti-debugging techniques on a (bad looking) Win32 application.
  ☆232Updated 5 months ago
• SamuelTulach / RwxMeme
  State of the art DLL injector that took 20 minutes to make
  ☆195Updated last year
• ioncodes / ceload
  Loading dbk64.sys and grabbing a handle to it
  ☆148Updated 2 years ago
• SamuelTulach / LightHook
  Single-header, minimalistic, cross-platform hook library written in pure C
  ☆262Updated last month
• Cr4sh / KernelForge
  A library to develop kernel level Windows payloads for post HVCI era
  ☆355Updated 3 years ago