invictus1306 / Anti-debugging-techniques
Anti-Debugging detection and obufuscation techniques that involved the use of Win32 API functions.
☆32Updated 8 years ago
Related projects: ⓘ
- PoC for detecting and dumping process hollowing code injection☆50Updated 5 years ago
- A demo implementation of a well-known technique used by some malware to evade userland hooking, using my library: libpeconv.☆19Updated 6 years ago
- Analyze and attack windows applications using dll hijacking vulnerabilities☆54Updated 4 years ago
- ☆58Updated this week
- ☆21Updated 3 years ago
- ☆48Updated 4 years ago
- Dumps information about all the callback objects found in a dump file and the functions registered for them☆32Updated 3 years ago
- A tool to help malware analysts tell that the sample is injecting code into other process.☆73Updated 9 years ago
- ☆22Updated 4 years ago
- A ready-made template for a project based on libpeconv.☆40Updated last year
- Parser for a custom executable format from Hidden Bee malware (first stage)☆39Updated last week
- A simple tool to view important DLL Characteristics and change DEP and ASLR☆45Updated 5 years ago
- Master list of all my vulnerability discoveries. Mostly 3rd party kernel drivers.☆47Updated 4 years ago
- This is a simple driver with x64 inline assembly☆52Updated 4 years ago
- Flare-On solutions☆36Updated 4 years ago
- Kernel mode windows NT API logger☆21Updated 5 years ago
- Blog posts☆30Updated 4 years ago
- ☆19Updated this week
- ☆45Updated 6 years ago
- Adding exceptions to Microsoft's Control Flow Guard (CFG)☆58Updated 8 years ago
- ☆40Updated this week
- DirectNtApi - simple method to make ntapi function call without importing or walking export table. Work under Windows 7, 8 and 10☆49Updated 6 months ago
- PoC for Bypassing UM Hooks By Bruteforcing Intel Syscalls☆39Updated 8 years ago
- Malware Analysis, Anti-Analysis, and Anti-Anti-Analysis☆43Updated 7 years ago
- ☆44Updated this week
- My collection of unpackers for malware packers/crypters☆28Updated 7 years ago
- Windows GPU rootkit PoC by Team Jellyfish☆35Updated 9 years ago
- A collection of empty MSVC projects, compiled using various versions and configurations of Visual Studio.☆30Updated 3 months ago
- PoC for detecting and dumping code injection (built and extended on UnRunPE)☆54Updated 5 years ago
- Crackmes Keygenmes Serialmes y más☆41Updated 2 years ago