kphongagsorn / windows-undocumented-apis
Projects on undocumented windows APIs, a keylogger PoC, and dll injection PoC. Based off of a Defcon workshop
☆34Updated 7 years ago
Alternatives and similar repositories for windows-undocumented-apis:
Users that are interested in windows-undocumented-apis are comparing it to the libraries listed below
- A console debugger using DbgX and Terminal.Gui☆29Updated 2 years ago
- A ready-made template for a project based on libpeconv.☆43Updated 3 months ago
- Windows x64 Process Scanner to detect application compatability shims☆36Updated 6 years ago
- r0ak ("roak") is the Ring 0 Army Knife -- A Command Line Utility To Read/Write/Execute Ring Zero on for Windows 10 Systems☆27Updated 6 years ago
- A simple API monitor for Windbg☆62Updated 7 years ago
- Bare template for a Kernel Mode Driver☆51Updated 4 years ago
- Yet another Windows DLL injector.☆38Updated 3 years ago
- Call 32bit NtDLL API directly from WoW64 Layer☆60Updated 4 years ago
- A simple password-based PE encryptor for Windows 32-bit executables.☆51Updated last week
- Window Executable file Function tracer using Debugging API☆44Updated 5 years ago
- An experimental dynamic malware unpacker based on Intel Pin and PE-sieve☆57Updated 5 months ago
- An example pattern in C# for using WMI to monitor process creation and termination events.☆51Updated 6 years ago
- Windows GPU rootkit PoC by Team Jellyfish☆35Updated 9 years ago
- ☆45Updated 6 years ago
- ☆35Updated 5 years ago
- Demos for Presentation on Windows Runtime Security☆70Updated 6 years ago
- Clone running process with ZwCreateProcess☆58Updated 4 years ago
- A set of small utilities, helpers for PIN tracers☆31Updated last year
- .NET wrapper for dbghelp.dll☆22Updated 5 years ago
- Local OXID Resolver (LCLOR) : Research and Tooling☆34Updated 3 years ago
- C++ DLL Bootstrapper for spinning up the CLR for C# Payloads☆42Updated 5 years ago
- Simple tool that allows you to have multiple Just-In-Time debuggers at once.☆91Updated last month
- Miscellaneous Code and Docs☆77Updated last year
- Dump certificates from PE files in different formats☆38Updated last year
- Think APIMonitor, but for .NET binaries.☆53Updated last year
- DLL Injection Library & Tools☆71Updated 8 years ago
- ☆23Updated last year