namazso / linux_injector
A simple ptrace-less shared library injector for x64 Linux
☆249Updated last year
Related projects ⓘ
Alternatives and complementary repositories for linux_injector
- A bare minimum hypervisor on AMD and Intel processors for learners.☆193Updated last week
- x86 malware emulator☆201Updated this week
- RISC-V Virtual Machine☆204Updated 3 weeks ago
- Updated version of System Management Mode backdoor for UEFI based platforms: old dog, new tricks☆279Updated last year
- compile-time control flow obfuscation using mba☆175Updated last year
- msdocsviewer is a simple tool that parses Microsoft's win32 API and driver documentation to be used within IDA.☆148Updated 10 months ago
- WinDbg extension written in Rust to dump the CPU / memory state of a running VM☆111Updated 2 weeks ago
- LLVM plugin to transparently apply stack spoofing and indirect syscalls to Windows x64 native calls at compile time.☆260Updated 10 months ago
- Native code virtualizer for x64 binaries☆403Updated this week
- Bootkit for Windows Sandbox to disable DSE/PatchGuard.☆261Updated last month
- Post exploitation technique to turn arbitrary kernel write / increment into full read/write primitive on Windows 11 22H2☆221Updated 2 years ago
- A list of excellent resources for anyone to deepen their understanding with regards to Windows Kernel Exploitation and general low level …☆123Updated 2 years ago
- Using Microsoft Warbird to automatically unpack and execute encrypted shellcode in ClipSp.sys without triggering PatchGuard☆239Updated 2 years ago
- Debugger Anti-Detection Benchmark☆291Updated 11 months ago
- ☆182Updated last year
- Jormungandr is a kernel implementation of a COFF loader, allowing kernel developers to load and execute their COFFs in the kernel.☆221Updated last year
- A generic UEFI bootkit used to achieve initial usermode execution. It works with modifications.☆396Updated last year
- Rusty Hypervisor - Windows UEFI Blue Pill Type-1 Hypervisor in Rust (Codename: Illusion)☆239Updated 2 months ago
- Linux Loadable Kernel Module (LKM) based rootkit (ring-0), capable of hiding itself, processes/implants, rmmod proof, has ability to bypa…☆234Updated last year
- BYOVD: Loading dbk64.sys and grabbing a handle to it☆149Updated 2 years ago
- Recursive and arbitrary code execution at kernel-level without a system thread creation☆154Updated last year
- ROPfuscator is a fine-grained code obfuscation framework for C/C++ programs using ROP (return-oriented programming).☆416Updated 6 months ago
- A DTrace on Windows Reimplementation☆328Updated 3 weeks ago
- Rusty Bootkit - Windows UEFI Bootkit in Rust (Codename: RedLotus)☆520Updated last year
- Web-based tool that allows comparing symbol, type and syscall information of Microsoft Windows binaries across different versions of the …☆329Updated this week
- Abusing exceptions for code execution.☆107Updated last year
- Obfuscator as LLVM extension☆95Updated 2 years ago
- Kernel-mode Paravirtualization in Ring 2, LLVM based linker, and some other things!☆262Updated last month
- Static Binary Instrumentation tool for Windows x64 executables☆180Updated 3 weeks ago
- IDA Pro plugin with a rich set of features: decryption, deobfuscation, patching, lib code recognition and various pseudocode transformati…☆126Updated this week