psmitty7373 / eifLinks
Evil Reflective DLL Injection Finder
☆47Updated 6 years ago
Alternatives and similar repositories for eif
Users that are interested in eif are comparing it to the libraries listed below
Sorting:
- a program to detect reflective dll injection on a live machine☆74Updated 9 years ago
- DLL Injection Library & Tools☆71Updated 9 years ago
- CAPE monitor DLLs☆41Updated 5 years ago
- A proof-of-concept subject interface package (SIP) used to demonstrate digital signature subversion attacks.☆99Updated 7 years ago
- A tiny PoC to inject and execute code into explorer.exe with WM_SETTEXT+WM_COPYDATA+SetThreadContext☆50Updated 7 years ago
- A process overwriting its own PEB to make an illusion that it has been loaded from a different path.☆96Updated 4 years ago
- Reflective Polymorphism☆105Updated 7 years ago
- Psinfo is a Volatility plugin which collects the process related information from the VAD (Virtual Address Descriptor) and PEB (Process E…☆36Updated 8 years ago
- Enumerate Windows Defender threat families and dump their names according category☆90Updated 6 years ago
- Educational repository for learning about rootkits and Windows Kernel Hooks.☆49Updated 10 years ago
- A slightly stripped down version of RID (an exercise in learning python C-Types...some of it is a little rushed/sloppy) and a stripped do…☆51Updated 12 years ago
- ☆21Updated 9 years ago
- Malware Analysis, Anti-Analysis, and Anti-Anti-Analysis☆45Updated 7 years ago
- A collection of tools to enumerate and analyse Windows DACLs☆108Updated 10 years ago
- Transfer EIP control to shellcode during malware analysis investigation☆76Updated 10 years ago
- Bypassing User Account Control (UAC) using TpmInit.exe☆43Updated 8 years ago
- POSHSPY backdoor code☆43Updated 8 years ago
- Windows Console Monitoring☆99Updated 7 years ago
- PoC for Bypassing UM Hooks By Bruteforcing Intel Syscalls☆39Updated 9 years ago
- Sample libraries to be used with IAT Patcher☆34Updated 2 years ago
- ☆52Updated 8 years ago
- Anti-technique Codes, Detection of Anti-technique codes☆38Updated 11 years ago
- The Minimalistic x86/x64 API Hooking Library for Windows☆32Updated 7 years ago
- PoC for detecting and dumping code injection (built and extended on UnRunPE)☆56Updated 6 years ago
- Build a Jekyll blog in minutes, without touching the command line.☆16Updated 6 years ago
- Gozi-MBR-rootkit Bootkit Modified☆70Updated 8 years ago
- ☆16Updated 7 years ago
- OpenHIPS prevents exploitation of Windows systems☆35Updated 12 years ago
- Shim database persistence (Fin7 TTP)☆37Updated 5 years ago
- Capture BAT is a behavioral analysis tool of applications for the Win32 operating system family.☆32Updated 12 years ago