Compileable POC of namazso's x64 return address spoofer.
☆51Jun 10, 2020Updated 6 years ago
Alternatives and similar repositories for ret_addr_spoofer
Users that are interested in ret_addr_spoofer are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- clearing traces of a loaded driver☆48Jul 2, 2022Updated 4 years ago
- A simple way to spoof return addresses using an exception handler☆43Aug 3, 2022Updated 4 years ago
- RET / JMP RBX call spoofer☆14Aug 8, 2019Updated 7 years ago
- Libraries written in inline assembly☆19Aug 7, 2023Updated 3 years ago
- ☆157May 21, 2024Updated 2 years ago
- Deploy open-source AI quickly and easily - Special Bonus Offer • AdRunpod Hub is built for open source. One-click deployment and autoscaling endpoints without provisioning your own infrastructure.
- Invoke functions with a spoofed return address. For 32-bit Windows binaries. Supports __fastcall, __thiscall, __stdcall and __cdecl calli…☆181Feb 17, 2023Updated 3 years ago
- search for a driver/dll module that has a wanted section bigger than the size of your image☆21Aug 14, 2021Updated 5 years ago
- ☆34Dec 13, 2017Updated 8 years ago
- Modified version of face injector v2, added some things and alternative injection method. TAGS: fortnite cheat, fortnite injector☆75May 26, 2022Updated 4 years ago
- Walks the Process' VAD list to grab the PTE's corresponding to a usermode virtual address, all to get the physical address☆23Nov 22, 2021Updated 4 years ago
- automates exploits using ROP chains, using ntdll-scraper☆15May 26, 2022Updated 4 years ago
- IO隐藏通信封装☆17May 31, 2021Updated 5 years ago
- A tiny tool to strip the debug info from Windows binary files.☆11Mar 16, 2022Updated 4 years ago
- This driver hooks a device object for ioctl and uses mdls to allocate physical pages and manually injects an entry into a process's page …☆16Feb 14, 2023Updated 3 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- This tool will allow you to spoof the return addresses of your functions as well as system functions.☆585Nov 12, 2022Updated 3 years ago
- A basic 100 loc CPU emulator using the existing code of ntoskrnl.exe☆74Aug 16, 2023Updated 3 years ago
- Hook NtDeviceIoControlFile with PatchGuard☆103May 10, 2022Updated 4 years ago
- Vectored Exception Handling Hooking Class☆169Jan 14, 2019Updated 7 years ago
- Manual mapper that uses PTE manipulation, Virtual Address Descriptor (VAD) manipulation, and forceful memory allocation to hide executabl…☆420Jan 29, 2022Updated 4 years ago
- Virtual and physical memory hacking library using gigabyte vulnerable driver☆71Mar 16, 2026Updated 7 months ago
- ☆19Oct 31, 2022Updated 3 years ago
- A wrapper class to hide the original calling address of a function☆54Aug 9, 2020Updated 6 years ago
- ☆37May 21, 2022Updated 4 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Simple program to stream offsets for your game cheat, Was reversing some p2c and decided to recreate a better version of this function fo…☆11Sep 12, 2022Updated 4 years ago
- Kernel driver that moves the mouse☆79Mar 15, 2025Updated last year
- Using LNK files and user input simulation to start processes under explorer.exe☆33Sep 21, 2024Updated 2 years ago
- C/C++ example of InjectMouseInput function☆35Apr 17, 2021Updated 5 years ago
- base for testing☆200Sep 28, 2024Updated 2 years ago
- State of the art DLL injector that took 20 minutes to make☆233Aug 16, 2023Updated 3 years ago
- Stealthy UM <-> KM communication system without creating any system threads, permanent hooks, driver objects, section objects or device o…☆391Apr 30, 2026Updated 5 months ago
- Abusing nvidia driver (nvoclock.sys) for physical/virtual memory and control register manipulation.☆300Mar 16, 2026Updated 7 months ago
- Illustrates the concept of return address spoofing, and how it is used.☆14May 13, 2020Updated 6 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- bypass CRC☆13May 3, 2018Updated 8 years ago
- This project will give you an example how you can hook a kernel vtable function that cannot be directly called☆81Dec 25, 2021Updated 4 years ago
- Kernel driver for detecting Intel VT-x hypervisors.☆205Jul 11, 2023Updated 3 years ago
- A Kernel driver for using against anti cheats like EAC or BE☆15Aug 10, 2021Updated 5 years ago
- A minimalistic way to spoof return addresses without using exceptions☆21Jul 26, 2022Updated 4 years ago
- Old way for blocking NMI interrupts☆30Sep 6, 2022Updated 4 years ago
- This is the P.O.C source for hooking the system calls on Windows 10 (1903) using it's dynamic trace feature weakness☆62Sep 12, 2019Updated 7 years ago