k4yt3x / InstantSuspendLinks
Instantly suspend processes to bypass kernel driver protections.
☆17Updated 5 months ago
Alternatives and similar repositories for InstantSuspend
Users that are interested in InstantSuspend are comparing it to the libraries listed below
Sorting:
- ☆40Updated 3 months ago
- A C# implementation that disables Windows Firewall bypassing UAC☆15Updated 7 months ago
- A powerful Windows UI monitoring and DNS exfiltration tool written in Rust, combining advanced UI event capture capabilities with secure …☆16Updated 3 months ago
- ☆10Updated 3 years ago
- Eset-Unload is a C++ tool that interacts with a process's loaded modules to identify and unload the ebehmoni.dll module, typically found …☆10Updated last month
- ☆21Updated last year
- ☆39Updated last year
- HEVD Exploit: ArbitraryWrite on Windows 10 22H2 - Bypassing KVA Shadow and SMEP via PML4 Entry Manipulation☆28Updated 10 months ago
- One Click Tool to Scan All the Enabled Protection of current Windows NT Kernel☆43Updated last year
- Process Injection: APC Injection☆32Updated 4 years ago
- PoC for the Untrusted Pointer Dereference in the appid.sys driver☆16Updated last year
- Your NTDLL vaccine from modern direct syscall methods.☆35Updated 3 years ago
- Read Memory without ReadProcessMemory for Current Process☆76Updated 3 years ago
- This program is used to perform reflective DLL Injection to a remote process specified by the user.☆65Updated last year
- A (quite) simple steganography algorithm to hide shellcodes within bitmap image.☆21Updated last year
- This exploit use PEB walk technique to resolve API calls dynamically, obfuscate all API calls to perform process injection.☆17Updated 10 months ago
- 🗡️ A multi-user malleable C2 framework targeting Windows. Written in C++ and Python☆45Updated last year
- Windows AppLocker Driver (appid.sys) LPE☆60Updated 10 months ago
- Rust bindings for VMProtect.☆26Updated last year
- Safely manage the unloading of DLLs that have been hooked into a process. Context: https://github.com/KNSoft/KNSoft.SlimDetours/discussio…☆75Updated last month
- Callstack spoofing using a VEH because VEH all the things.☆20Updated 2 months ago
- Exploit for eneio64.sys - Turning Physical Memory R/W into Virtual Memory R/W☆34Updated last month
- ☆20Updated 2 years ago
- Research of modifying exported function names at runtime (C/C++, Windows)☆17Updated last year
- Change hash for a signed pe☆16Updated last year
- a demo module for the kaine agent to execute and inject assembly modules☆38Updated 9 months ago
- AIDA64DRIVER Elevation of Privilege Vulnerability☆13Updated 7 months ago
- the Open Source and Pure C++ Packer for eXecutables☆21Updated 2 years ago
- ☆19Updated 3 months ago
- A VMWare logger using built-in backdoor.☆29Updated 7 months ago