Static analysis of Ironshield anti-cheat
☆82Sep 23, 2026Updated 3 weeks ago
Alternatives and similar repositories for ironshield-analysis
Users that are interested in ironshield-analysis are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Windows kernel driver and usermode app emulator for x86-64 and ARM64 targets.☆171Updated this week
- Windows Kernel-Mode Shellcode Development Framework (WKMSDF)☆79Aug 1, 2026Updated 2 months ago
- Run unsigned kernel payloads in a signed kernel driver via wasm3. No JIT/W^x (HVCI/etc., compliant)☆152Aug 18, 2026Updated 2 months ago
- usermode thread hijacking detection via working set page fault monitoring☆43Jul 17, 2026Updated 3 months ago
- A concept of using a ROP chain paired with a WRMSR primitive to call kernel functions and map unsigned drivers through BYOVD (AmdTools64.…☆67Sep 21, 2026Updated 3 weeks ago
- Bare Metal GPUs on DigitalOcean Gradient AI • AdPurpose-built for serious AI teams training foundational models, running large-scale inference, and pushing the boundaries of what's possible.
- ☆406Updated this week
- PoC for WinNotify, demonstrated through a driver mapper, and local privilege escalation.☆40Sep 20, 2026Updated 3 weeks ago
- Verified IDA is a harness for model-led reverse engineering.☆44Sep 14, 2026Updated last month
- x86-64 Symbolic Execution & LLVM IR Lifting Framework for Deobfuscation☆118Sep 25, 2026Updated 3 weeks ago
- Technical documentation, reverse engineering research, and tools for the Windows Endpoint Security Platform (WESP).☆81Sep 18, 2026Updated last month
- How Windows kernel exploits work, and which defenses still stop them: 157 dissected CVE case studies, dated bypass verdicts per build and…☆79Oct 2, 2026Updated 2 weeks ago
- Windows BYOVD research on DCRCVDrv.sys and Alinubx.sys, reverse engineering their kernel primitives, IOCTL surfaces, and detection opport…☆38Oct 1, 2026Updated 2 weeks ago
- Static devirtualizer for Tencent VM☆121Oct 11, 2026Updated last week
- Raw NTFS volume oracle: locked-file read and offline SAM hashes without LSASS☆62Jul 22, 2026Updated 2 months ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- A stealth-focused kernel-mode virtual HID mouse driver for Windows. Built with KMDF and VHF for precise, hardware-level input simulation …☆49Jul 27, 2026Updated 2 months ago
- Abuses the Credential Provider interface to steal plaintext passwords from logonui.exe via CredProvDataModel.dll hooks☆73Updated this week
- Finding SSDT address on windows 10 64bit☆14Sep 10, 2022Updated 4 years ago
- Proof of Concept for Process Code Injection Without Using WriteProcessMemory☆151Sep 27, 2026Updated 3 weeks ago
- Cross-platform network execution toolkit (SMB/Kerberos/WMI/LDAP/DCSync) built on TrustedSec's Titanis - NetExec-style workflow in C#☆82Sep 18, 2026Updated last month
- The AI-friendly binary analysis & decompilation engine — 1:1 lift, built on LLVM [WIP]☆93Updated this week
- LLVM based devirtualizer for the binaryshield software protector.☆94May 7, 2026Updated 5 months ago
- A technique that mixes NTDLL unhooking and hellsgate gate varients☆33Updated this week
- MBA deobfuscator via Program Synthesis and Term Rewriting☆74Jul 6, 2026Updated 3 months ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Process Impairment Exploit Chain.☆36Aug 12, 2026Updated 2 months ago
- Evidence-backed static recovery of readable Python source from Nuitka native binaries.☆49Sep 12, 2026Updated last month
- NoWarbird - Warbird devirtualization project☆87Aug 25, 2026Updated last month
- ☆28Apr 5, 2026Updated 6 months ago
- PsSetCreateProcessNotifyRoutine/Ex/Ex2 hook☆13May 30, 2024Updated 2 years ago
- Intel 64/Windows low-level experiments☆119Sep 16, 2026Updated last month
- CVE-85884 POC☆33Updated this week
- An agent-first decompiler designed to be refined by other agents. Kuna is written in Rust and was originally ported from Ghidra.☆637Updated this week
- Capability extraction from Time Travel Debugging Traces with C++ Implementation of CAPA that supports code scanning☆31Sep 24, 2026Updated 3 weeks ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Drop any Windows DPAPI artifact and it identifies the format and the exact master key it needs, then decrypts once you supply the key. Of…☆31Sep 23, 2026Updated 3 weeks ago
- Autonomous Windows POC developer from patchwatch diff reports☆163Jul 30, 2026Updated 2 months ago
- Resolve and invoke native APIs from Swift, Objective-C++, and C++ without writing mangled names or manual ABI casts.☆67Updated this week
- Tool to authenticate to an LDAP/S server with a certificate through Schannel written in Rust. 🦀☆77Oct 10, 2026Updated last week
- Patchless ETW & AMSI bypass POC reverse-engineered from Turla’s Kazuar v3 loader.☆24Jan 14, 2026Updated 9 months ago
- ☆36Jul 14, 2026Updated 3 months ago
- Misc Windows Driver/Kernel PoCs that do not need a separate repo.☆14May 4, 2025Updated last year