rbmm / TPM

Related projects ⓘ

Alternatives and complementary repositories for TPM

• zodiacon / VerifierDLL
  Example of building an application verifer DLL
  ☆44Updated 5 months ago
• therealdreg / dregate
  call gates as stable comunication channel for NT x86 and Linux x86_64
  ☆30Updated last year
• oldboy21 / SWAPPALA
  In-memory hiding technique
  ☆42Updated 5 months ago
• zodiacon / NativePowers
  Native Powers Talk demos
  ☆14Updated last year
• 0xMegaByte / COM-Explained
  ☆27Updated 2 years ago
• benheise / ANGRYORCHARD
  A kernel exploit leveraging NtUserHardErrorControl to elevate a thread to KernelMode and achieve arbitrary kernel R/W & more.
  ☆28Updated 2 years ago
• rbmm / remap
  break link between dll and it file on disk
  ☆11Updated 2 months ago
• rbmm / NtDetours
  Detours implementation (x64/x86) which used only ntdll import
  ☆88Updated 5 months ago
• je5442804 / CreateProcessInternalW-Full
  Reimplement CreateProcessInternalW via Windows 10 20H1+/Windows 11 Base on NtCreateUserProcess-Post
  ☆47Updated 2 months ago
• Cracked5pider / unguard-eat
  havoc kaine plugin to mitigate PAGE_GUARD protected image headers using JOP gadgets
  ☆25Updated 3 months ago
• worawit / malk
  Demonstrate calling a kernel function and handle process creation callback against HVCI
  ☆48Updated last year
• jbaines-r7 / dellicious
  Enabled / Disable LSA Protection via BYOVD
  ☆62Updated 2 years ago
• gabriellandau / ShadowStackWalk
  Finding Truth in the Shadows
  ☆84Updated last year
• realoriginal / bootdoor
  An initial proof of concept of a bootkit based on Cr4sh's DMABackdoorBoot
  ☆59Updated last year
• rad9800 / VehApiResolve
  ☆98Updated 2 years ago
• kkent030315 / razy_importer
  Rust implementation of lazy_importer
  ☆45Updated last year
• 0mWindyBug / MinifilterHook
  silence file system monitoring components by hooking their minifilters
  ☆51Updated 9 months ago
• maziland / StackBombing
  Next gen process injection technique
  ☆42Updated 4 years ago
• Flerov / EAKC-EnumAllKernelCallbacks
  Enumerate Callbacks and all Object Types
  ☆13Updated last year
• b-irb / PigPEI
  PEIM (UEFI) bootkit targeting OVMF (EDK2)
  ☆33Updated 11 months ago
• jsacco / PPL_Bypass
  ☆12Updated 2 years ago
• rbmm / RtlClone
  ☆27Updated 4 months ago
• connormcgarr / EATGuard
  Implementation of an export address table protection mitigation, like Export Address Filtering (EAF)
  ☆93Updated last year
• DownWithUp / WarbirdExamples
  An example of how to use Microsoft Windows Warbird technology
  ☆25Updated last year
• oberrich / phnt-rs
  Rust bindings to the System Informer's (formerly known as Process Hacker) "phnt" native Windows headers
  ☆39Updated 2 months ago
• hasherezade / sig_finder
  Signature finder (from PE-bear)
  ☆29Updated 5 months ago
• keowu / InstrumentationCallbackToolKit
  A fast method to intercept syscalls from any user-mode process using InstrumentationCallback and detect any process using Instrumentation…
  ☆22Updated last year
• Coldzer0 / TinyPDBParser
  Windows PDB Parser using Imagehlp library.
  ☆16Updated 2 years ago
• Azvanzed / vmw-logger-rs
  A VMWare logger using built-in backdoor.
  ☆25Updated last month
• jsecurity101 / MSFT_DriverBlockList
  Repository of Microsoft Driver Block Lists based off of OS-builds
  ☆39Updated 7 months ago