kphongagsorn / windows-undocumented-apisLinks
Projects on undocumented windows APIs, a keylogger PoC, and dll injection PoC. Based off of a Defcon workshop
☆36Updated 7 years ago
Alternatives and similar repositories for windows-undocumented-apis
Users that are interested in windows-undocumented-apis are comparing it to the libraries listed below
Sorting:
- A simple API monitor for Windbg☆63Updated 8 years ago
- r0ak ("roak") is the Ring 0 Army Knife -- A Command Line Utility To Read/Write/Execute Ring Zero on for Windows 10 Systems☆27Updated 7 years ago
- UIAccess UAC Bypass using token duplication and keyboard events☆27Updated 5 years ago
- Bare template for a Kernel Mode Driver☆51Updated 5 years ago
- Exploits I've authored☆60Updated 5 years ago
- Runs programs as TrustedInstaller☆49Updated 6 years ago
- Demos and presentation from SECArmy Village Grayhat 2020☆38Updated 2 years ago
- An example pattern in C# for using WMI to monitor process creation and termination events.☆52Updated 6 years ago
- Explore Job Objects on a Windows system☆85Updated 5 years ago
- Windows GPU rootkit PoC by Team Jellyfish☆36Updated 10 years ago
- Demos for Presentation on Windows Runtime Security☆70Updated 6 years ago
- A small library helping to parse commandline parameters (for C/C++)☆57Updated 2 months ago
- A simple tool to view important DLL Characteristics and change DEP and ASLR☆44Updated 6 years ago
- C++ DLL Bootstrapper for spinning up the CLR for C# Payloads☆44Updated 6 years ago
- An experimental dynamic malware unpacker based on Intel Pin and PE-sieve☆60Updated 11 months ago
- Ebfuscator: Abusing system errors for binary obfuscation☆52Updated 5 years ago
- ☆49Updated 5 years ago
- Local OXID Resolver (LCLOR) : Research and Tooling☆35Updated 4 years ago
- Dump certificates from PE files in different formats☆38Updated last year
- Windows Injection 101: from Zero to ROP (HITCON 2017)☆28Updated 7 years ago
- Clone running process with ZwCreateProcess☆58Updated 4 years ago
- Windows x64 Process Scanner to detect application compatability shims☆37Updated 6 years ago
- Designed to learn OS specific anti-emulation patterns by fuzzing the Windows API.☆99Updated 5 years ago
- DLL Injection Library & Tools☆71Updated 9 years ago
- A simple POC to demonstrate the power of .NET debugging for injection☆72Updated 5 years ago
- Diff tool for comparing symbols in PDB files☆83Updated 5 years ago
- A tool to extract a KeePass master password from memory☆86Updated 4 years ago
- My commands and scripts extending WinDbg☆40Updated 4 months ago
- ☆22Updated 5 years ago
- Managed wrappers around the Windows API and some Native API☆35Updated 7 years ago