huangqiheng / andpack
PE文件打包器。将一系列的插件dll（寄生dll），打包捆绑到目标exe中，以寄生的方式改变程序的原有行为。寄生的dll完全手动装配，隐藏执行；宿主被恢复后，会被寄生dll强势再感染。
☆21Updated 11 years ago
Related projects ⓘ
Alternatives and complementary repositories for andpack
- 具备对PE文件添加区段、添加花指令、对代码段加密、修复重定位、加密IAT等功能☆58Updated 4 years ago
- 一个加壳工具☆62Updated 5 years ago
- 加密壳☆33Updated 4 years ago
- Gh0st 源码分析 by easyserverdev☆27Updated 5 years ago
- 安全卫士r3工具集☆37Updated 4 years ago
- Thanks to all those who helped me.☆20Updated 6 years ago
- shellcode注入测试工具☆49Updated 5 years ago
- Remote PC control (Windows Platform). || PC远程控制（Windows平台）。☆49Updated 4 years ago
- Rapid generation ShellCode☆60Updated 7 years ago
- 远控源码☆39Updated 5 years ago
- WINDOWS黑客編程技術詳解 [Windows-Hack-Programming backup]☆41Updated 5 years ago
- [HIPS]RDP(3389)爆破防护☆44Updated 5 years ago
- 一款http协议的漏洞扫描框架☆28Updated 4 years ago
- 基于UC的启发式杀毒引擎[还没做完]☆31Updated 3 years ago
- PEBFake(修改PEB 伪装当前进程路径、参数等)☆49Updated 3 years ago
- Only for research and learning, not for commercial and illegal use☆10Updated 5 years ago
- ida提取特征码脚本☆53Updated 4 years ago
- Windows CVE主防(HIPS/HIDS)☆54Updated 3 years ago
- 绕过卡巴斯基主动防御,加载驱动，unhook所有ssdt hook及shadow ssdt hook☆36Updated 9 years ago
- windwos内核研究与驱动Code☆60Updated 2 years ago
- 沙箱测试,测评国内常见沙箱的代码与结论☆98Updated 3 years ago
- 学习加壳技术的案例代码☆22Updated 3 years ago
- WMI无文件后门☆9Updated 3 years ago
- 内存加载DLL 支持X86和X64（Memory PELoader Support X86 and X64）☆30Updated last year
- ☆29Updated 3 years ago
- ☆15Updated 4 years ago
- vs2019 环境 Gh0st编译通过☆10Updated 2 years ago