hfiref0x / al-khaser
(This is a fork used primarily to submit patches into upstream repository) Public malware techniques used in the wild: Virtual Machine, Emulation, Debuggers, Sandbox detection.
☆19Updated 4 years ago
Related projects ⓘ
Alternatives and complementary repositories for al-khaser
- Manual PE image mapper☆61Updated 11 years ago
- Some garbage drivers written for getting started☆62Updated 4 years ago
- Bypassing code hooks detection in modern anti-rootkits via building faked PTE entries.☆73Updated 13 years ago
- A sample on how to inject a DLL from a kernel driver☆61Updated 8 years ago
- kernel-mode TDI client which can send and receive HTTP requests☆55Updated 6 years ago
- This is the P.O.C source for hooking the system calls on Windows 10 (1903) using it's dynamic trace feature weakness☆51Updated 5 years ago
- Code injection by hijacking threads in Windows 32-bit applications☆43Updated 6 years ago
- Capstone disassembly/disassembler framework: Core (Arm, Arm64, M68K, Mips, PPC, Sparc, SystemZ, X86, X86_64, XCore) + bindings (Python, J…☆14Updated 5 years ago
- My take on the capcom driver vulnerability☆26Updated 7 years ago
- Stealthy Injector that leverages a vulnerable driver and other exploits to remain undetected☆37Updated 5 years ago
- (DEPRECATED) A simple anti-anti debug library for Windows☆29Updated 4 years ago
- ☆66Updated 3 years ago
- Polymorphic Stub Creator☆30Updated 7 years ago
- Analyze PatchGuard☆53Updated 6 years ago
- LSASS INJECTOR☆33Updated 5 years ago
- For Example. See Miro's Blog☆29Updated last year
- Capcom wrapper with safety in mind.☆79Updated 6 years ago
- Windows Manipulation Library (x64, User/Kernelmode)☆74Updated 6 years ago
- Analysing and defeating PatchGuard universally☆34Updated 4 years ago
- BattlEye x64 usermode injector☆62Updated 5 years ago
- a simple intel vt code both support x86 & x64. PatchGuard monitor.☆75Updated 3 years ago
- Another method to anti ThreadHideFromDebugger☆34Updated 5 years ago
- disable most common windowsx64 systems patchguard☆83Updated 5 years ago
- core of pkn game hacking project. Including mainly for process management, memory management, and DLL injecttion. Also PE analysis, windo…☆64Updated 5 years ago
- Driver Loader/BE Bypass/Win Malware(lol)☆34Updated 5 years ago
- NT reversal☆26Updated 6 years ago
- ☆63Updated 6 years ago
- Intel Virtualization Technology demo☆65Updated 8 years ago