kkent030315 / detect-anyrun
ANY.RUN sandbox detection collection
☆17Updated 7 months ago
Alternatives and similar repositories for detect-anyrun:
Users that are interested in detect-anyrun are comparing it to the libraries listed below
- C/C++ antidebugging library for Windows☆17Updated 2 months ago
- PoC kernel to usermode injection☆79Updated last year
- PAGE_GUARD based hooking library☆42Updated 2 years ago
- Hijack NotifyRoutine for a kernelmode thread☆41Updated 2 years ago
- Binary rewriter for 64-bit PE files.☆70Updated last year
- ntoskrnl .data hooks for UM-KM communication☆37Updated 10 months ago
- devirtualization vmprotect☆62Updated 2 years ago
- vdk is a set of utilities used to help with exploitation of a vulnerable driver.☆39Updated 2 years ago
- idashare is an IDA Pro plugin that allows you to quickly share the currently loaded binary and IDA database over a local HTTP server with…☆10Updated last week
- This is a POC Test project for INTEL CPUs on blocking NMI Entries through the IDT Handler.☆39Updated 5 months ago
- Create stealthy, inline, EPT-like hooks using SMAP and SMEP☆36Updated 5 months ago
- POC Hook of nt!HvcallCodeVa☆50Updated last year
- ☆24Updated last year
- ☆29Updated 6 months ago
- Kernel ReClassEx☆65Updated last year
- Improved VMP Idea(detect anti-anti-debug tools by bug)☆41Updated last year
- Compileable POC of namazso's x64 return address spoofer.☆51Updated 4 years ago
- ZeroImport is a lightweight and easy to use C++ library for Windows Kernel Drivers. It allows you to hide any import in your kernel drive…☆48Updated 2 years ago
- X86/X64 Hardware Breakpoint Manager☆41Updated 3 years ago
- partially disable patchguard up to win11 21H2☆19Updated 9 months ago
- Kernel Level NMI Callback Blocker☆74Updated 6 months ago
- This is the PoC of a dynamic lifter and deobfuscator with collecting trace.☆35Updated last year
- A simple present scene, kernel allocation injector.☆24Updated 2 years ago
- detect hypervisor with Nmi Callback☆34Updated 2 years ago
- Me fockin' pe protector☆45Updated 2 years ago
- Driver shared section communication☆45Updated last week
- Provides commands to read from and write to arbitrary kernel-mode memory for users with the Administrator privilege. HVCI compatible. No …☆15Updated 9 months ago
- UnknownField is a tool based clang that obfuscating the order of fields to protect your C/C++ game or code.☆44Updated 2 years ago
- A poc that abuses Enclave☆37Updated 2 years ago
- hidden_syscall - syscaller without using syscall instruction in code☆61Updated 2 years ago