kphongagsorn / windows-undocumented-apisLinks
Projects on undocumented windows APIs, a keylogger PoC, and dll injection PoC. Based off of a Defcon workshop
☆36Updated 7 years ago
Alternatives and similar repositories for windows-undocumented-apis
Users that are interested in windows-undocumented-apis are comparing it to the libraries listed below
Sorting:
- A simple API monitor for Windbg☆64Updated 8 years ago
- Exploits I've authored☆60Updated 6 years ago
- UIAccess UAC Bypass using token duplication and keyboard events☆27Updated 6 years ago
- A simple tool to view important DLL Characteristics and change DEP and ASLR☆45Updated 7 years ago
- Windows x64 Process Scanner to detect application compatability shims☆37Updated 7 years ago
- Call 32bit NtDLL API directly from WoW64 Layer☆61Updated 5 years ago
- r0ak ("roak") is the Ring 0 Army Knife -- A Command Line Utility To Read/Write/Execute Ring Zero on for Windows 10 Systems☆29Updated 7 years ago
- A small library helping to parse commandline parameters (for C/C++)☆58Updated 6 months ago
- Yet another Windows DLL injector.☆39Updated 4 years ago
- DLL Injection Library & Tools☆73Updated 9 years ago
- DirectNtApi - simple method to make ntapi function call without importing or walking export table. Work under Windows 7, 8 and 10☆53Updated last year
- A ready-made template for a project based on libpeconv.☆50Updated 3 weeks ago
- ☆46Updated 7 years ago
- An experimental dynamic malware unpacker based on Intel Pin and PE-sieve☆62Updated last year
- Helper Script to convert a Windbg dumped structure (using the 'dt' command) into a C structure. It creates dummy structs for you if neede…☆27Updated 2 years ago
- Bare template for a Kernel Mode Driver☆51Updated 5 years ago
- Windows GPU rootkit PoC by Team Jellyfish☆37Updated 10 years ago
- Designed to learn OS specific anti-emulation patterns by fuzzing the Windows API.☆99Updated 5 years ago
- Explore Job Objects on a Windows system☆82Updated 6 years ago
- Rekall Memory Forensic Framework☆33Updated 6 years ago
- ☆22Updated 5 years ago
- A session-0 capable dll injection utility☆76Updated 7 years ago
- Demos and presentation from SECArmy Village Grayhat 2020☆37Updated 2 years ago
- IDA script for vmprotect Windows Api address decoder☆52Updated 4 years ago
- Runs programs as TrustedInstaller☆49Updated 6 years ago
- An example pattern in C# for using WMI to monitor process creation and termination events.☆53Updated 7 years ago
- ☆37Updated 6 years ago
- Plugin for Process Hacker 2 ( https://github.com/processhacker2 ), displays system hooks and able to unhook too.☆52Updated 7 years ago
- .NET executable packer☆62Updated 7 years ago
- A simple POC to demonstrate the power of .NET debugging for injection☆73Updated 5 years ago