malcomvetter / ProtectProcessFromJoeUser
PoC: Protecting Joe User from killing his own process.
☆9Updated 6 years ago
Alternatives and similar repositories for ProtectProcessFromJoeUser:
Users that are interested in ProtectProcessFromJoeUser are comparing it to the libraries listed below
- PoC: process watcher patterns to make killing a process hard.☆11Updated 6 years ago
- An example in C# for programmatically calling UAC to escalate to admin☆14Updated 6 years ago
- C# Exe that can remotely retrieve C# assemblies for in-memory execution☆19Updated 6 years ago
- Quick Proof of Concept for reading a processes memory and searching for a specific string.☆10Updated 6 years ago
- Hide .Net assembly into png images☆36Updated 5 years ago
- PoC: Prevent a debugger from attaching to managed .NET processes via a watcher process code pattern.☆32Updated 6 years ago
- CVE-2019-1064 Local Privilege Escalation Vulnerability☆11Updated 5 years ago
- Dump certificates from PE files in different formats☆38Updated last year
- An example pattern in C# for using WMI to monitor process creation and termination events.☆52Updated 6 years ago
- The evolution of NxRansomware☆10Updated 5 years ago
- POC runtime crypter☆9Updated 6 years ago
- CreateProcessAsUser experiments☆6Updated 9 years ago
- ☆40Updated 12 years ago
- PoC of a protected process causing a blue screen if killed.☆15Updated 6 years ago
- Managed wrappers around the Windows API and some Native API☆35Updated 6 years ago
- Anti-Debug methods with C#☆14Updated 4 years ago
- Minimalist Custom .NET Core Garbage Collector☆21Updated 4 years ago
- Loading unmanaged dll (32 and 64bits) in managed exe☆10Updated 4 years ago
- .net debugger / msil interpreter / emulator☆16Updated 6 years ago
- A collection of plugins for Babel Obfuscator☆13Updated 4 years ago
- Hide code from dnSpy and other C# spying tools☆42Updated 4 years ago
- Lightweight licensing library for .NET applications which allows the managing of licenses via web based scripts and on-the-fly code compi…☆15Updated 4 years ago
- ☆75Updated 8 months ago
- Uses WMI Event Win32_ModuleLoadTrace to monitor module loading. Provides filters, and detailed data. Has an option to monitor for CLR Inj…☆41Updated 5 years ago
- ps-like .NET Assembly for enumerating processes on the current machine or a remote machine.☆13Updated 5 years ago
- Trojan downloader simple virus☆14Updated 6 years ago
- NativePayload_TiACBT (Remote Thread Injection + C# Async Method + CallBack Functions Technique)☆14Updated last year
- Capture screenshots from .NET using .NET methods or Windows API calls☆67Updated 5 years ago
- C# Codedom example / builder☆24Updated 5 years ago
- Injection of MSIL using Cecil☆12Updated 9 years ago