opcode86 / SysCaller

Related projects: ⓘ

• UCFoxi / NotifyRoutineHijackThread
  Hijack NotifyRoutine for a kernelmode thread
  ☆40Updated 2 years ago
• axine0 / ModFinder
  ☆15Updated this week
• stuxnet147 / luna-1
  ☆11Updated 3 years ago
• 1401199262 / HookSwapContext
  ☆23Updated last year
• NewWorldComingSoon / UnknownField
  UnknownField is a tool based clang that obfuscating the order of fields to protect your C/C++ game or code.
  ☆44Updated last year
• 1401199262 / HookHvcallCodeVa
  ☆18Updated last year
• SurgeGotTappedAgain / Arch-x64
  ☆19Updated this week
• muturikaranja / disable-threat-tracing
  Disable threat tracing from the kernel..
  ☆12Updated 2 years ago
• ZwCreateFile / RWXAbusing
  RWX Section Abusing
  ☆16Updated 10 months ago
• crvvdev / intraceptor
  Intraceptor intercept Windows NT API calls and redirect them to a kernel driver to bypass process/threads handle protections.
  ☆27Updated 2 years ago
• Nitr0-G / PeVisor
  A project on the Unicorn emulator to emulate the code of Pe files in windows
  ☆15Updated last week
• HyperSine / siren-hypervisor
  ☆36Updated last year
• Ahora57 / Adobe-Premiere-Pro-Free-Cracked-April-2023
  ☆28Updated this week
• Sentient111 / StealingSignatures
  Stealing signatures from pe files
  ☆15Updated 2 years ago
• gmh5225 / FakeEnclave
  A poc that abuses Enclave
  ☆36Updated 2 years ago
• pseuxide / ZwDetectMemoryRead
  neat way to detect memory read using nt layer function.
  ☆14Updated last year
• armvirus / DriverDllFInder
  search for a driver/dll module that has a wanted section bigger than the size of your image
  ☆21Updated 3 years ago
• oakboat / UCReadDriver
  ☆16Updated last month
• Peribunt / Exception-Ret-Spoofing
  A simple way to spoof return addresses using an exception handler
  ☆31Updated 2 years ago
• msmania / hk
  Injector with kernel power
  ☆15Updated 3 years ago
• ch4ncellor / Inline-PatchFinder
  comparing data of module exports from disk and memory, then caching any differences.
  ☆23Updated 2 years ago
• kkent030315 / CiGetCertPublisherName
  An example code of CiGetCertPublisherName
  ☆14Updated 2 years ago
• serbx / KernelVtableFunctionHook
  ☆19Updated 2 years ago
• rsnrsnrsn / Code-execution-by-abusing-VEH
  Achieving code execution through abusing VEH
  ☆15Updated last year
• xtremegamer1 / Illicit-memory-allocation
  This driver hooks a device object for ioctl and uses mdls to allocate physical pages and manually injects an entry into a process's page …
  ☆11Updated last year
• veryboreddd / Return-address-spoofer
  Illustrates the concept of return address spoofing, and how it is used.
  ☆14Updated 4 years ago
• helloobaby / Nmi-Callback
  detect hypervisor with Nmi Callback
  ☆32Updated last year
• ItzPAX / proxyproc
  Header only UM AC "bypass"
  ☆16Updated 4 months ago
• bytesundso / SneakCalls
  direct systemcalls with a modern c++20 interface.
  ☆41Updated last year
• 1401199262 / UnsuccessfulDriver
  ☆12Updated 2 years ago