NtCreateUserProcess with CsrClientCallServer for mainstream Windows x64 version
☆44Jul 16, 2024Updated last year
Alternatives and similar repositories for NtCreateUserProcess-Post
Users that are interested in NtCreateUserProcess-Post are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Reimplement CreateProcessInternalW via Windows 10 20H1+/Windows 11 Base on NtCreateUserProcess-Post☆81Sep 2, 2024Updated last year
- Dockerized template to build CS BOFs using clang-cl☆26Jan 29, 2026Updated 5 months ago
- Extended library for using direct system calls on windows☆17Feb 6, 2022Updated 4 years ago
- Crystal Palace library for proxying Nt API calls via the Threadpool☆105Oct 18, 2025Updated 8 months ago
- Walks through the 4-level paging structures in Windows x64☆14Feb 12, 2023Updated 3 years ago
- Deploy open-source AI quickly and easily - Special Bonus Offer • AdRunpod Hub is built for open source. One-click deployment and autoscaling endpoints without provisioning your own infrastructure.
- Surgical UNWIND_INFO preservation for sleep masking without call stack spoofing.☆55Mar 30, 2026Updated 2 months ago
- Simulate SendInput with ClassService☆35Sep 5, 2018Updated 7 years ago
- Undocumented MSVC☆49Nov 10, 2025Updated 7 months ago
- Terminate AV/EDR processes by exploiting the vulnerable NsecSoft driver☆31Sep 15, 2025Updated 9 months ago
- IO隐藏通信封装☆17May 31, 2021Updated 5 years ago
- So you want to fix a raw .net file manually ? I got it!, Let's fix RVA and Sizes, Relocations, EP, IAT, Metadata Dir, Directory, BSJB, In…☆10Aug 8, 2022Updated 3 years ago
- Notes my learning steps about Windows-NT☆23May 18, 2017Updated 9 years ago
- Open Source Libraries Collection☆25Jan 1, 2016Updated 10 years ago
- Security research helper for CLFS drivers☆16Sep 5, 2024Updated last year
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Some eternal WIP stuff :)☆21Nov 18, 2025Updated 7 months ago
- Collection of shellcode injection and execution techniques☆17Mar 17, 2026Updated 3 months ago
- One-header configurable C++20 COFF loader☆21Jul 21, 2025Updated 11 months ago
- 针对windows rootkit的一些检测，分别从进程、端口、文件这三个方面进行检测。☆21Jan 16, 2025Updated last year
- G-Presto Anti-Cheat Reverse Engineered.☆27Jun 8, 2022Updated 4 years ago
- ☆11Apr 26, 2021Updated 5 years ago
- Illustrates the concept of return address spoofing, and how it is used.☆14May 13, 2020Updated 6 years ago
- Binary DisASseMbler☆24Sep 26, 2022Updated 3 years ago
- ☆10Apr 19, 2026Updated 2 months ago
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- Source code on the 1.44MB 3.5 floppy accompanying the Windows NT File System Internals book.☆20Jul 31, 2019Updated 6 years ago
- A portable C# utility for enumerating local and remote windows sessions☆57Jan 1, 2026Updated 5 months ago
- A wrapper around Windows, calls explicitly the lowest possible calls☆14Jan 19, 2023Updated 3 years ago
- ☆59Jun 8, 2022Updated 4 years ago
- Enumerate various traits from Windows processes as an aid to threat hunting☆203Jan 13, 2022Updated 4 years ago
- Just another version of the custom stack call from Proxy-Function-Calls-For-ETwTI☆34Mar 17, 2023Updated 3 years ago
- Proof-of-Concept software for detecting AV/EDR hooks in Windows libraries.☆39May 12, 2022Updated 4 years ago
- Simple memory obfuscator.☆23Jul 21, 2022Updated 3 years ago
- ☆16Sep 26, 2019Updated 6 years ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- A very weird RAT☆19Aug 11, 2022Updated 3 years ago
- Win32 PE Anti-RE and Anti-debugging Framework☆13May 14, 2019Updated 7 years ago
- Async rust support for the reverse-engineered Crowdstrike Falcon protocol between the Sensor and cloud services☆19Mar 10, 2023Updated 3 years ago
- PsSetCreateProcessNotifyRoutine/Ex/Ex2 hook☆13May 30, 2024Updated 2 years ago
- 扫描以及恢复 r3hook 类☆10Aug 29, 2021Updated 4 years ago
- Intraceptor intercept Windows NT API calls and redirect them to a kernel driver to bypass process/threads handle protections.☆31May 18, 2022Updated 4 years ago
- Tiny driver patch to allow kernel callbacks to work on Win10 21h1☆34Feb 7, 2022Updated 4 years ago