nptr / no-crt-template
simple c++ visual studio project that doesn't use the C/C++ runtime
☆23Updated 6 years ago
Alternatives and similar repositories for no-crt-template:
Users that are interested in no-crt-template are comparing it to the libraries listed below
- Detours implementation (x64/x86) which used only ntdll import☆88Updated 7 months ago
- ☆105Updated 2 years ago
- Reimplement CreateProcessInternalW via Windows 10 20H1+/Windows 11 Base on NtCreateUserProcess-Post☆54Updated 4 months ago
- Compileable POC of namazso's x64 return address spoofer.☆50Updated 4 years ago
- A Bumblebee-inspired Crypter☆80Updated 2 years ago
- Hook all callbacks which are registered with LdrRegisterDllNotification☆84Updated last year
- Research of modifying exported function names at runtime (C/C++, Windows)☆17Updated 7 months ago
- Code from process of reversing Sysinternals Suite for educational purposes, with videos to associate them☆48Updated last year
- silence file system monitoring components by hooking their minifilters☆55Updated 11 months ago
- NtCreateUserProcess with CsrClientCallServer for mainstream Windows x64 version☆26Updated 6 months ago
- Six cases demonstrating methods of optimizing GetProcAddress☆17Updated 3 years ago
- PoC exploit for HP Hardware Diagnostic's EtdSupp driver☆50Updated last year
- Next gen process injection technique☆43Updated 4 years ago
- kernel to user mode APC injector☆44Updated 2 years ago
- Dynamically generated obfuscated jumps and/or function calls☆34Updated last year
- Implementation of an export address table protection mitigation, like Export Address Filtering (EAF)☆95Updated last year
- Minifilter Callback Patching Proof-of-Concept☆64Updated 2 years ago
- Custom GetProcAddress, GetModuleHandleA and some dbghelp.dll functions☆79Updated 5 years ago
- Set the process mitigation policy for loading only Microsoft Modules , and block any userland 3rd party modules☆42Updated last year
- ☆84Updated 7 months ago
- GetModuleHandle (via PEB) and GetProcAddress (via EAT) like☆32Updated 2 years ago
- Header-only C++ library for producing PE files.☆29Updated last year
- Finding Truth in the Shadows☆85Updated last year
- ☆58Updated 2 years ago
- ☆79Updated 4 months ago
- windows rootkit☆55Updated 8 months ago
- Research into removing strings & API call references at compile-time (Anti-Analysis)☆24Updated 7 months ago
- Uses Threat-Intelligence ETW events to identify shellcode regions being hidden by fluctuating memory protections☆106Updated last year
- ☆16Updated last year
- PAGE_GUARD based hooking library☆42Updated 2 years ago