nettitude / hyperv-driver-thread-detection-poc

Related projects: ⓘ

• mobdk / CloneProcess
  Clone running process with ZwCreateProcess
  ☆58Updated 3 years ago
• matterpreter / cpuid
  A class to emulate the behavior of NtQuerySystemInformation when passed the SystemHypervisorDetailInformation information class
  ☆24Updated last year
• d35ha / PEReflectiveInjection
  Remote PE reflective injection with a simple reflective loader
  ☆28Updated 5 years ago
• PorLaCola25 / NtCreateUserProcess
  ☆12Updated 3 years ago
• DimopoulosElias / Primitives
  ☆31Updated 4 years ago
• rad9800 / OwlScanner
  ☆13Updated this week
• ch3rn0byl / WinDbg-Extensions
  ☆17Updated 3 years ago
• jbaines-r7 / dellicious
  Enabled / Disable LSA Protection via BYOVD
  ☆61Updated 2 years ago
• airbus-cert / ttd2mdmp
  Extract data of TTD trace file to a minidump
  ☆28Updated last year
• Flawww / NtSyscaller
  Manually perform syscalls without going through any external API or DLL.
  ☆16Updated last year
• klezVirus / DCKFinder
  Dangling COM Keys Finder
  ☆14Updated 2 years ago
• AlionGreen / apc-injection
  Process Injection: APC Injection
  ☆27Updated 3 years ago
• rbmm / Noname
  really ?
  ☆12Updated 6 months ago
• LethalSnake1337 / PE-Loader-exercise
  A simple PE loader.
  ☆25Updated last year
• jsecurity101 / MSFT_DriverBlockList
  Repository of Microsoft Driver Block Lists based off of OS-builds
  ☆38Updated 5 months ago
• 7eRoM / elam
  A Practical example of ELAM (Early Launch Anti-Malware)
  ☆27Updated 2 years ago
• Idov31 / UdpInspector
  Listing UDP connections with remote address without sniffing.
  ☆30Updated 11 months ago
• SandboxEscaper / msihijacker
  ☆31Updated this week
• rbmm / PfxViewer
  ☆10Updated 5 months ago
• waleedassar / SyscallNumberExtractor
  ☆23Updated 2 years ago
• FULLSHADE / DrvLoader
  ☆28Updated this week
• rbmm / Hollowed-Process
  ☆24Updated 5 months ago
• zimnyaa / LEOPARDSEAL
  A simple Linux in-memory .so loader
  ☆25Updated last year
• vineetgaurav / WIN_JELLY
  Windows GPU rootkit PoC by Team Jellyfish
  ☆35Updated 9 years ago
• rad9800 / VehApiResolve
  ☆96Updated 2 years ago
• rbmm / RtlClone
  ☆26Updated 2 months ago
• connormcgarr / Presentations
  ☆25Updated 9 months ago
• SecIdiot / bootdoor
  ☆31Updated this week
• 0vercl0k / inject
  Yet another Windows DLL injector.
  ☆36Updated 2 years ago
• bluefrostsecurity / Windows-Drive-Remapping-EoP
  ☆23Updated 10 months ago
• therealdreg / windbgtocstruct
  Helper Script to convert a Windbg dumped structure (using the 'dt' command) into a C structure. It creates dummy structs for you if neede…
  ☆26Updated last year