killvxk / CodeStudyLinks
逆的或者收集的别人家的代码
☆29Updated last year
Alternatives and similar repositories for CodeStudy
Users that are interested in CodeStudy are comparing it to the libraries listed below
Sorting:
- 安全卫士项目☆32Updated 8 years ago
- 卓然主动防御源码（可执行文件+完整源码+完整作品报告）☆15Updated 6 years ago
- 锁主页驱动☆42Updated 6 years ago
- map driver to memory☆26Updated 7 years ago
- 绕过卡巴斯基主动防御,加载驱动，unhook所有ssdt hook及shadow ssdt hook☆38Updated 10 years ago
- 一个32位windows下x86指令集的代码扭曲加密小工具☆33Updated 6 years ago
- 一个早期的抗启发式查杀的WIN32免杀壳☆45Updated 12 years ago
- ☆40Updated 6 years ago
- A file system filter, you can do some interesting thing, maybe it's cool.☆55Updated 6 years ago
- 寒江独钓 Windows内核安全编程☆45Updated 13 years ago
- Windows内核设计思想☆26Updated 8 years ago
- PEBFake(修改PEB 伪装当前进程路径、参数等)☆53Updated 5 years ago
- x64HOOK库☆18Updated 6 years ago
- Sysark全称system anti-rootkit，是我学习内核写的工具（2013年的代码，后续不会再更新），里面基本上所有的功能都是用内核实现的。这里只是实现了反rootkit部分功能，作为工具的话，本人觉得还欠完善，但作为学习，或有人需要。目前针对的是XP SP2，…☆27Updated 8 years ago
- windows inlinehook R3 R0☆11Updated 7 years ago
- 基于UC的启发式杀毒引擎[还没做完]☆35Updated 4 years ago
- 粗暴地枚举管理内核的WFP对象。 Manage kernel WFPs in a brutal way.☆27Updated 8 years ago
- 内核级ARK工具。☆62Updated 9 years ago
- 管道监视器,类似于spyxx之类的东西,一般用于监视目标进程的系统调用.关键词:detours+piep☆23Updated 11 years ago
- enable libemu run pe file and add some good modify☆14Updated 7 years ago
- x64 dll hijacking tool(like AheadLib)☆57Updated 4 years ago
- 一个可以帮助你进行Windows驱动开发和分析的工具。☆46Updated 4 years ago
- 一个简单的用于win7 x64的驱动级HIPS☆57Updated 9 years ago
- 大表哥的Syscall-Monitor☆34Updated 6 years ago
- HTTP/HTTPS/DNS inspector (windows driver)☆27Updated 6 years ago
- 小型主动防御引擎☆57Updated 9 years ago
- 稳定多线程中的inline hook☆16Updated 6 years ago
- For Example. See Miro's Blog☆30Updated 3 years ago
- 驱动层拦截web访问源码☆30Updated 7 years ago
- 此目录收集整理反调试方法☆75Updated 4 years ago