mrexodia / perfect-dll-proxy

Related projects ⓘ

Alternatives and complementary repositories for perfect-dll-proxy

• zer0condition / ZeroHVCI
  Achieve arbitrary kernel read/writes/function calling in Hypervisor-Protected Code Integrity (HVCI) protected environments calling withou…
  ☆178Updated 3 weeks ago
• floesen / KExecDD
  Admin to Kernel code execution using the KSecDD driver
  ☆236Updated 7 months ago
• namazso / dll-proxy-generator
  Generate a proxy dll for arbitrary dll
  ☆145Updated last month
• Dump-GUY / IDA_PHNT_TYPES
  Converted phnt (Native API header files from the System Informer project) to IDA TIL, IDC (Hex-Rays).
  ☆115Updated 2 months ago
• ElliotKillick / LdrLockLiberator
  For when DLLMain is the only way
  ☆353Updated 3 weeks ago
• hasherezade / thread_namecalling
  Process Injection using Thread Name
  ☆241Updated 2 months ago
• janoglezcampos / llvm-yx-callobfuscator
  LLVM plugin to transparently apply stack spoofing and indirect syscalls to Windows x64 native calls at compile time.
  ☆260Updated 10 months ago
• KiFilterFiberContext / warbird-hook
  Using Microsoft Warbird to automatically unpack and execute encrypted shellcode in ClipSp.sys without triggering PatchGuard
  ☆237Updated 2 years ago
• klezVirus / DriverJack
  Hijacking valid driver services to load arbitrary (signed) drivers abusing native symbolic links and NT paths
  ☆304Updated 3 months ago
• eversinc33 / unKover
  PoC Anti-Rootkit/Anti-Cheat Driver.
  ☆160Updated 2 months ago
• mrexodia / phnt-single-header
  Single header version of System Informer's phnt library.
  ☆186Updated this week
• LloydLabs / ntqueueapcthreadex-ntdll-gadget-injection
  This novel way of using NtQueueApcThreadEx by abusing the ApcRoutine and SystemArgument[0-3] parameters by passing a random pop r32; ret …
  ☆231Updated last year
• ergrelet / themida-unmutate
  Static deobfuscator for Themida, WinLicense and Code Virtualizer 3.x's mutation-based obfuscation.
  ☆226Updated 3 months ago
• hfiref0x / WubbabooMark
  Debugger Anti-Detection Benchmark
  ☆291Updated 11 months ago
• alexander-hanel / msdocsviewer
  msdocsviewer is a simple tool that parses Microsoft's win32 API and driver documentation to be used within IDA.
  ☆148Updated 10 months ago
• can1357 / hvdetecc
  Collection of hypervisor detections
  ☆189Updated last month
• thesecretclub / SandboxBootkit
  Bootkit for Windows Sandbox to disable DSE/PatchGuard.
  ☆261Updated last month
• Kudaes / Unwinder
  Call stack spoofing for Rust
  ☆299Updated 2 months ago
• CognisysGroup / SweetDreams
  Implementation of Advanced Module Stomping and Heap/Stack Encryption
  ☆210Updated last year
• SamuelTulach / PwnedBoot
  Using Windows' own bootloader as a shim to bypass Secure Boot
  ☆142Updated 4 months ago
• Cracked5pider / LdrLibraryEx
  A small x64 library to load dll's into memory.
  ☆424Updated last year
• namazso / dll-universal-patcher
  A universal binary patching dll.
  ☆80Updated last month
• Xyrem / Yumekage
  Demo proof of concept for shadow regions, and implementation of HyperDeceit.
  ☆267Updated last year
• thesecretclub / riscy-business
  RISC-V Virtual Machine
  ☆204Updated 3 weeks ago
• hackerhouse-opensource / SignToolEx
  Patching "signtool.exe" to accept expired certificates for code-signing.
  ☆271Updated 4 months ago
• GetRektBoy724 / DCMB
  Dont Call Me Back - Dynamic kernel callback resolver. Scan kernel callbacks in your system in a matter of seconds!
  ☆224Updated 4 months ago
• MahmoudZohdy / Process-Injection-Techniques
  Various Process Injection Techniques
  ☆143Updated 2 years ago
• AdamOron / PatchGuardBypass
  Bypassing PatchGuard on modern x64 systems
  ☆245Updated last year
• rad9800 / hwbp4mw
  ☆210Updated last year
• zer0condition / ZeroThreadKernel
  Recursive and arbitrary code execution at kernel-level without a system thread creation
  ☆154Updated last year