namazso / linux_injector

Related projects ⓘ

Alternatives and complementary repositories for linux_injector

• thesecretclub / riscy-business
  RISC-V Virtual Machine
  ☆201Updated last week
• notpidgey / EagleVM
  Native code virtualizer for x64 binaries
  ☆394Updated this week
• hfiref0x / WubbabooMark
  Debugger Anti-Detection Benchmark
  ☆290Updated 11 months ago
• tandasat / barevisor
  A bare minimum hypervisor on AMD and Intel processors for learners.
  ☆192Updated last month
• alexander-hanel / msdocsviewer
  msdocsviewer is a simple tool that parses Microsoft's win32 API and driver documentation to be used within IDA.
  ☆148Updated 10 months ago
• thesecretclub / SandboxBootkit
  Bootkit for Windows Sandbox to disable DSE/PatchGuard.
  ☆258Updated 3 weeks ago
• yardenshafir / IoRingReadWritePrimitive
  Post exploitation technique to turn arbitrary kernel write / increment into full read/write primitive on Windows 11 22H2
  ☆221Updated 2 years ago
• sha0coder / scemu
  x86 malware emulator
  ☆200Updated this week
• 0vercl0k / snapshot
  WinDbg extension written in Rust to dump the CPU / memory state of a running VM
  ☆111Updated this week
• ThatLing / limba
  compile-time control flow obfuscation using mba
  ☆174Updated last year
• ropfuscator / ropfuscator
  ROPfuscator is a fine-grained code obfuscation framework for C/C++ programs using ROP (return-oriented programming).
  ☆415Updated 6 months ago
• KasperskyLab / hrtng
  IDA Pro plugin with a rich set of features: decryption, deobfuscation, patching, lib code recognition and various pseudocode transformati…
  ☆118Updated last week
• realoriginal / bootlicker
  A generic UEFI bootkit used to achieve initial usermode execution. It works with modifications.
  ☆396Updated last year
• memN0ps / illusion-rs
  Rusty Hypervisor - Windows UEFI Blue Pill Type-1 Hypervisor in Rust (Codename: Illusion)
  ☆238Updated 2 months ago
• D4stiny / ExceptionOrientedProgramming
  Abusing exceptions for code execution.
  ☆106Updated last year
• Cr4sh / SmmBackdoorNg
  Updated version of System Management Mode backdoor for UEFI based platforms: old dog, new tricks
  ☆276Updated last year
• thalium / symless
  ☆180Updated last year
• janoglezcampos / llvm-yx-callobfuscator
  LLVM plugin to transparently apply stack spoofing and indirect syscalls to Windows x64 native calls at compile time.
  ☆255Updated 9 months ago
• memN0ps / redlotus-rs
  Rusty Bootkit - Windows UEFI Bootkit in Rust (Codename: RedLotus)
  ☆519Updated last year
• reveng007 / reveng_rtkit
  Linux Loadable Kernel Module (LKM) based rootkit (ring-0), capable of hiding itself, processes/implants, rmmod proof, has ability to bypa…
  ☆233Updated last year
• advanced-microcode-patching / shiva
  A custom ELF linker/loader for installing ET_REL binary patches at runtime
  ☆150Updated last month
• ergrelet / themida-unmutate
  Static deobfuscator for Themida, WinLicense and Code Virtualizer 3.x's mutation-based obfuscation.
  ☆222Updated 3 months ago
• leandrofroes / gftrace
  A command line Windows API tracing tool for Golang binaries.
  ☆147Updated 11 months ago
• ioncodes / ceload
  BYOVD: Loading dbk64.sys and grabbing a handle to it
  ☆149Updated 2 years ago
• KiFilterFiberContext / warbird-hook
  Using Microsoft Warbird to automatically unpack and execute encrypted shellcode in ClipSp.sys without triggering PatchGuard
  ☆236Updated 2 years ago
• can1357 / hvdetecc
  Collection of hypervisor detections
  ☆182Updated last month
• zeze-zeze / ioctlance
  A tool that is used to hunt vulnerabilities in x64 WDM drivers
  ☆163Updated 10 months ago
• Xyrem / Yumekage
  Demo proof of concept for shadow regions, and implementation of HyperDeceit.
  ☆265Updated last year
• VoidSec / DriverBuddyReloaded
  Driver Buddy Reloaded is an IDA Pro Python plugin that helps automate some tedious Windows Kernel Drivers reverse engineering tasks
  ☆326Updated 2 weeks ago
• mandiant / STrace
  A DTrace on Windows Reimplementation
  ☆328Updated last week