huoji120 / Etw-Syscall
https://key08.com/index.php/2021/10/19/1375.html
☆65Updated 2 years ago
Alternatives and similar repositories for Etw-Syscall:
Users that are interested in Etw-Syscall are comparing it to the libraries listed below
- Windows Kernel Knowledge && Collect Resources on the wire && Nothing innovation by myself &&☆56Updated 2 months ago
- Call NtCreateUserProcess directly as normal.☆68Updated 2 years ago
- 利用物理内存映射,实现虚拟内存的伪隐藏☆84Updated 2 years ago
- ☆30Updated last year
- IAT-Obfuscation to make static analysis of executable harder.☆42Updated 3 years ago
- Kill Protected Process Light Process (include av)☆56Updated last year
- win32kbase!NtDCompositionCommitSynchronizationObject and win32kbase!NtGdiGetCertificate☆16Updated 3 years ago
- 简单安排一下 autochk.sys 这个rootkit☆71Updated 2 years ago
- ksc4cpp is a shellcode framework for windows kernel based on C++☆22Updated 2 years ago
- Free(or force?)file and delete it☆12Updated 6 years ago
- 32 bit process inject shellcode to 32 bit process and 64 bit process☆29Updated last year
- ☆23Updated 2 years ago
- Hook NtDeviceIoControlFile with PatchGuard☆104Updated 2 years ago
- 从admin冲到TrustedInstaller☆17Updated 2 years ago
- ☆27Updated 2 years ago
- 编译时混淆字符串,以确保生成的二进制PE不会暴漏明文字符串。(C++ 14 及以上)☆27Updated 3 years ago
- ☆22Updated 4 years ago
- Windows Defender VDM lua collections☆47Updated 2 years ago
- 沙箱测试,测评国内常见沙箱的代码与结论☆100Updated 3 years ago
- IDA Python script for generating Windows x86 shellcode with one click☆36Updated last year
- ☆32Updated 4 years ago
- Implementation of several code injection techniques.☆20Updated 3 years ago
- 一款linux下的安全产品目的是满足个人安全需求有SSH爆破防护和SYN攻击扫描防护功能,基于netfilter,☆19Updated last year
- ☆40Updated 3 years ago
- Hide Port In Windows☆38Updated 4 months ago
- Rookit and anti rookit on Windows platform☆12Updated 10 months ago
- windwos内核研究与驱动Code☆61Updated 3 years ago