maomingxu / PE_import-_adder
Add a new section in the PE file, and copy old import descriptor to the new section then insert a new dll file into the import directory.
☆9Updated 3 years ago
Alternatives and similar repositories for PE_import-_adder:
Users that are interested in PE_import-_adder are comparing it to the libraries listed below
- PE文件解析和加壳工具☆18Updated 2 years ago
- ☆23Updated 3 years ago
- ☆52Updated 2 years ago
- 保护进程☆20Updated 2 years ago
- 通过重造轮子和调用OpenSSL的方式学习密码！！☆15Updated 2 years ago
- sc4cpp is a shellcode framework based on C++☆88Updated 3 years ago
- ☆47Updated 2 years ago
- fuck the bin search☆14Updated 2 years ago
- InstDrv v2☆35Updated 8 months ago
- ☆27Updated last year
- Black Signature Driver☆23Updated last year
- 基于Unicorn仿真PE模拟☆27Updated 3 years ago
- NTAssassin is a fast, small and powerful library helps C/C++ development on Windows☆32Updated last year
- 易语言静态编译后期处理☆19Updated last year
- StrongVM is a virtualizing protector for .NET applications.☆29Updated 2 years ago
- esig文件生成工具☆26Updated 5 years ago
- ☆21Updated 3 years ago
- 对debughelp的二次开发☆11Updated 2 years ago
- x64HOOK库☆18Updated 5 years ago
- https://www.huorong.cn/☆14Updated last year
- 过TP驱动☆29Updated 5 years ago
- MiniVT is a simple showcase of Intel CPU's virtualization technology VT-x on the Windows platform.☆27Updated last year
- 模拟NtTerminateProcess的实现关闭PCHunter☆14Updated 7 years ago
- 以shellcode注入其它驱动执行，躲避驱动签名检测，曾pubg项目中使用，，，当然现在，，，☆27Updated 2 years ago
- Modified by Mircosoft detours.Support Window/Linux/Macos. Support X86/x64/ARM64/ARM/MIPS/LongArch.☆36Updated 3 weeks ago
- 用来辅助分析VB程序的IDA插件☆23Updated 4 years ago
- BypaPH - Process Hacker's bypass (read/write any process virtual memory & kernel mem) 带签名驱动，驱动级内存读取☆22Updated 4 years ago
- Process path modification x64☆54Updated 6 years ago
- Samples that shows how to use API Hook libraries: Detours, Deviare, MHook, EasyHook to hide files with the "+/*.txt" file name pattern.☆12Updated 2 years ago
- 一个用来做windows内核hook的框架☆86Updated this week