jilvan1234 / WinAPI-TricksLinks
☆10Updated 4 years ago
Alternatives and similar repositories for WinAPI-Tricks
Users that are interested in WinAPI-Tricks are comparing it to the libraries listed below
Sorting:
- Executes shellcode from a remote server and aims to evade in-memory scanners☆31Updated 5 years ago
- A Study in Obfuscation: Analyzing the effect of various techniques to bypass AV engines☆42Updated 2 years ago
- golang String Obfuscate☆9Updated 3 years ago
- A PoC to demo modifying cmdline of the child process dynamically. It might be useful against process log tracing, AV or EDR.☆40Updated 4 years ago
- Just another casual shellcode native loader☆24Updated 3 years ago
- Adobe Reader DC Information Leak Exploit☆21Updated 2 years ago
- A proof of concept of real custom GetProcAddress and GetModuleBaseAddress☆21Updated 3 years ago
- Evilbytecode-Gate resolves Windows System Service Numbers (SSNs) using two methods: analyzing the Guard CF Table in ntdll.dll and parsing…☆22Updated 2 months ago
- ☆26Updated 3 years ago
- Protected Process (Light) Dump: Uses Zemana AntiMalware Engine To Open a Privileged Handle to a PP/PPL Process And Inject MiniDumpWriteDu…☆23Updated 5 years ago
- ☆54Updated 2 years ago
- Convert native dll to shellcode, and support exported function☆22Updated 4 years ago
- Eset-Unload is a C++ tool that interacts with a process's loaded modules to identify and unload the ebehmoni.dll module, typically found …☆10Updated 2 months ago
- Bypass UAC elevation on Windows 8 (build 9600) & above.☆56Updated 2 years ago
- Implementation of ITaskHandler in C++☆13Updated 2 years ago
- Collection of shellcode injection and execution techniques☆17Updated 3 years ago
- Giga-byte Control Center (GCC) is a software package designed for improved user experience of Gigabyte hardware, often found in gaming an…☆31Updated 2 years ago
- C code to enable ETW tracing for Dotnet Assemblies☆31Updated 2 years ago
- using the Recycle Bin to insure persistence☆12Updated 2 years ago
- Simple PoC to locate hooked functions by EDR in ntdll.dll☆38Updated 2 years ago
- A PoC tool for exploiting leaked process and thread handles☆32Updated last year
- ETWNetMonv3 is simple C# code for Monitoring TCP Network Connection via ETW & ETWProcessMon/2 is for Monitoring Process/Thread/Memory/Ima…☆40Updated 2 years ago
- Using Thread Description To Hide Shellcodes☆14Updated 2 years ago
- Measures average CPU cycles for the CPUID instruction to detect if the code is running in a VM by comparing against a threshold.☆21Updated 2 months ago
- Create a C++ PE which loads an XTEA-crypted .NET PE shellcode in memory.☆15Updated 6 years ago
- Listing UDP connections with remote address without sniffing.☆29Updated last year
- PoC for the Untrusted Pointer Dereference in the appid.sys driver☆20Updated last year
- Utilizing Alternative Shellcode Execution Via Callbacks☆13Updated last year
- A (quite) simple steganography algorithm to hide shellcodes within bitmap image.☆21Updated last year
- Non organized Cpp code files I used for my research on Windows☆25Updated 4 years ago