jonomango / pe-builderLinks
Header-only C++ library for producing PE files.
☆35Updated 2 years ago
Alternatives and similar repositories for pe-builder
Users that are interested in pe-builder are comparing it to the libraries listed below
Sorting:
- Binary rewriter for 64-bit PE files.☆88Updated last year
- x86-64 user mode emulation using Zydis☆71Updated 2 months ago
- Create stealthy, inline, EPT-like hooks using SMAP and SMEP☆59Updated last year
- driver that communicates using a shared section☆74Updated 8 months ago
- Improved VMP Idea(detect anti-anti-debug tools by bug)☆46Updated 2 years ago
- Collection of Cheat dumps for Research and Detection.☆16Updated 4 months ago
- A Windows PE packer for executables (x64) with LZMA compression and with full TLS (Thread Local Storage) support.☆90Updated last month
- Kernel ReClassEx☆65Updated 2 years ago
- Simple, fast and lightweight Header-Only C++ Assembler Library☆128Updated 3 months ago
- Yet another IDA Pro/Home plugin for deobfuscating stack strings☆108Updated 2 months ago
- Me fockin' pe protector☆45Updated 3 years ago
- Load dll with undocumented functions and debug symbols☆47Updated last year
- ntoskrnl .data hooks for UM-KM communication☆51Updated last year
- A x86_64 software emulator☆156Updated 3 months ago
- Compileable POC of namazso's x64 return address spoofer.☆50Updated 5 years ago
- ☆87Updated last month
- ☆32Updated last year
- C++ macro for x64 programs that breaks ida hex-rays decompiler tool.☆131Updated last year
- x86-64 Automated test data generator☆26Updated 3 months ago
- PoC kernel to usermode injection☆90Updated last year
- Runtime Hyper-V Hijacking with DDMA☆65Updated 3 months ago
- intel vt-x type 2 hypervisor☆60Updated 7 months ago
- Windows kernel driver template for cmkr (with testsigning).☆35Updated 2 years ago
- Windows PDB parser for kernel-mode environment.☆103Updated 6 months ago
- Allows for same-file KernelMode function execution using Encrypted addresses of Functions☆46Updated 2 months ago
- Proof-of-concept game using VBS enclaves to protect itself from cheating☆45Updated last year
- Generate a PDB file given the old PDB file and an address mapping☆50Updated 4 months ago
- Experiment with PAGE_GUARD protection to hide memory from other processes☆52Updated last year
- Symbolic Execution based on lifting amd64 to z3☆29Updated last year
- A devirtualization engine for Themida.☆101Updated last year