Modern C++ wrapper for Windows PE signature verification mechanism
☆30Aug 9, 2019Updated 6 years ago
Alternatives and similar repositories for windows-pe-signature-verifying
Users that are interested in windows-pe-signature-verifying are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- x64 Kernel Hooks Detection☆21Jan 1, 2017Updated 9 years ago
- Simple programmatic Windows processes monitor.☆25Mar 8, 2015Updated 11 years ago
- Process doppelganging POC using direct system calls, PPID spoofing and dropbox as an external delivery channel for the payload.☆17Jan 7, 2021Updated 5 years ago
- This program can retrieve signature information from PE files which signed by one or more certificates on Windows. Supporting multi-signe…☆104Sep 20, 2022Updated 3 years ago
- Monitor ETW events for Windows process mitigation policies, with stack traces☆30Oct 7, 2022Updated 3 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- first commit☆66Oct 29, 2020Updated 5 years ago
- A general solution to simulate execution of virtualized instructions (vmprotect/themida, etc.).☆81Feb 9, 2022Updated 4 years ago
- The driver STL library used by myself☆13Oct 19, 2022Updated 3 years ago
- [POC Detected]Bypass BE Anti Dll Injection (POC/Need Driver)☆18Mar 30, 2020Updated 6 years ago
- Using C++ STL on Windows kernle development☆90Feb 21, 2019Updated 7 years ago
- eac memory sig maker☆13Jun 10, 2021Updated 5 years ago
- In-depth reverse engineering of a suspected LockBit affiliate dropper, documenting shellcode loading, import polymorphism, and payload de…☆15Jan 24, 2026Updated 5 months ago
- Windows Minifilter driver that redirects any I/O Request of mp3 files to a target file☆19Jul 7, 2015Updated 11 years ago
- PE file manipulation library.☆63Jan 27, 2020Updated 6 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- 共享esig特征文件库☆10Dec 18, 2020Updated 5 years ago
- ☆26Apr 4, 2019Updated 7 years ago
- The demo on Windows☆21Mar 6, 2016Updated 10 years ago
- Hardware and software inventory for Microsoft Windows systems☆17Oct 16, 2015Updated 10 years ago
- Hide Driver By MiProcessLoaderEntry☆291May 17, 2019Updated 7 years ago
- Windows PE Signature Thief in C++☆52Aug 21, 2020Updated 5 years ago
- Virtual Machine for x64 and x86 systems☆36Apr 13, 2025Updated last year
- 粗暴地枚举管理内 核的WFP对象。 Manage kernel WFPs in a brutal way.☆24Jan 14, 2018Updated 8 years ago
- direct systemcalls with a modern c++20 interface.☆45Jan 6, 2023Updated 3 years ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- ☆39Oct 29, 2020Updated 5 years ago
- A small HTTP server written in C++ using IO Completion Ports.☆24Sep 13, 2017Updated 8 years ago
- A simple ransomware defender.It uses minifilter to filt "rewrite" and "delete" events in kernel.And it handles event in user mode.☆27Aug 14, 2018Updated 7 years ago
- posting example☆15May 11, 2020Updated 6 years ago
- kernel-mode TDI client which can send and receive HTTP requests☆56Jun 9, 2018Updated 8 years ago
- A simple parser(library) which extracts shimcache data from windows.☆16May 20, 2019Updated 7 years ago
- windows kernel pagehook☆42Oct 30, 2022Updated 3 years ago
- An OS-level container which virtualizes Windows' file system, registry, kernel, and network communication.☆105Apr 9, 2015Updated 11 years ago
- Examples of Static and Dynamic Thread Local Storage Callback Creation☆26Apr 6, 2017Updated 9 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- repeater☆28Aug 25, 2023Updated 2 years ago
- 一个windows内核驱动分析框架，对内核所有导出函数进行挂钩监控☆76Nov 19, 2025Updated 8 months ago
- 这是我的博客《菜鸟与 cef 的邂逅之旅（四）：Soui 离屏渲染封装 Cef3 细节分析》的实验代码（代码参考蓝先生和启程的 Demo）☆17Aug 14, 2017Updated 8 years ago
- Small C++ cryptography library based on Qt and OpenSSL.☆19Jul 11, 2024Updated 2 years ago
- ☆16Jan 9, 2023Updated 3 years ago
- 可在非测试模式下符号化读取内核内存。Kernel memory can be read symbolically in non test mode。☆107Sep 1, 2022Updated 3 years ago
- 利用物理内存映射，实现虚拟内存的伪隐藏☆85Sep 15, 2022Updated 3 years ago