malcomvetter / ProtectProcessFromJoeUserLinks
PoC: Protecting Joe User from killing his own process.
☆9Updated 6 years ago
Alternatives and similar repositories for ProtectProcessFromJoeUser
Users that are interested in ProtectProcessFromJoeUser are comparing it to the libraries listed below
Sorting:
- PoC: process watcher patterns to make killing a process hard.☆11Updated 6 years ago
- An example in C# for programmatically calling UAC to escalate to admin☆14Updated 6 years ago
- C# Exe that can remotely retrieve C# assemblies for in-memory execution☆19Updated 6 years ago
- Hide .Net assembly into png images☆36Updated 5 years ago
- POC runtime crypter☆9Updated 6 years ago
- An example pattern in C# for using WMI to monitor process creation and termination events.☆52Updated 6 years ago
- PoC: Prevent a debugger from attaching to managed .NET processes via a watcher process code pattern.☆32Updated 6 years ago
- Anti-Debug methods with C#☆14Updated 4 years ago
- ☆40Updated 13 years ago
- Managed wrappers around the Windows API and some Native API☆35Updated 6 years ago
- Dump certificates from PE files in different formats☆38Updated last year
- The evolution of NxRansomware☆10Updated 5 years ago
- Hide code from dnSpy and other C# spying tools☆42Updated 4 years ago
- CreateProcessAsUser experiments☆6Updated 9 years ago
- A collection of plugins for Babel Obfuscator☆13Updated 4 years ago
- CVE-2019-1064 Local Privilege Escalation Vulnerability☆11Updated 5 years ago
- Copy-on-write fork()-like memory dump using Process Snapshotting APIs☆13Updated 7 years ago
- Inject Frida-Gadget into a local process☆26Updated 5 years ago
- ☆11Updated 4 years ago
- NativePayload_TiACBT (Remote Thread Injection + C# Async Method + CallBack Functions Technique)☆14Updated 2 years ago
- Lightweight licensing library for .NET applications which allows the managing of licenses via web based scripts and on-the-fly code compi…☆15Updated 5 years ago
- ☆76Updated 10 months ago
- Example managed and unmanaged plugins for CoreHook☆14Updated 6 years ago
- C++ Host .NET CLR & Run a assembly directly from ressource (RT_RCDATA) without extraction disk.☆15Updated 2 years ago
- InsecurePowerShellHost is a .NET Core host process for InsecurePowerShell, a version of PowerShell Core v6.0.0 with key security features…☆31Updated 7 years ago
- .net debugger / msil interpreter / emulator☆16Updated 6 years ago
- PoC of a protected process causing a blue screen if killed.☆15Updated 6 years ago
- ☆34Updated 6 years ago
- WPF helper library☆15Updated 6 years ago
- Quick Proof of Concept for reading a processes memory and searching for a specific string.☆10Updated 6 years ago