red4000 / ZMIST
Updated z0mbie MISTFALL engine
☆15Updated 7 years ago
Alternatives and similar repositories for ZMIST:
Users that are interested in ZMIST are comparing it to the libraries listed below
- A collection of tools, source code, and papers researching Windows' implementation of CET.☆79Updated 4 years ago
- Headers for linking your software with ntdll.dll☆15Updated 4 years ago
- Hooking the GDT - Installing a Call Gate. POC for Rootkit Arsenal Book Second Edition (version 2022)☆69Updated last year
- Add an empty section to a PE file☆52Updated 7 years ago
- Helper Script to convert a Windbg dumped structure (using the 'dt' command) into a C structure. It creates dummy structs for you if neede…☆26Updated last year
- Three Tiny Examples of Directly Using Vista's NtCreateUserProcess☆85Updated 9 years ago
- An experimental dynamic malware unpacker based on Intel Pin and PE-sieve☆58Updated 5 months ago
- x86 and x64 assembly "read-eval-print loop" for Windows☆28Updated 7 years ago
- DirectNtApi - simple method to make ntapi function call without importing or walking export table. Work under Windows 7, 8 and 10☆52Updated 10 months ago
- A set of small utilities, helpers for PIN tracers☆31Updated last year
- ☆23Updated 4 years ago
- clone of armadillo patched for windows☆48Updated 3 months ago
- 🧶 The Win32 usermode threading library with UMS/fibers/threads support☆30Updated 5 years ago
- Resolve DOS MZ executable symbols at runtime☆96Updated 3 years ago
- Library and tools to access the Windows Minidump (MDMP) format☆38Updated 6 months ago
- Enumerate user mode shared memory mappings on Windows.☆117Updated 3 years ago
- View handles and object for each object type☆63Updated 5 years ago
- Library for using direct system calls☆35Updated this week
- Static library and headers for linking your software with ntdll.dll☆32Updated 5 years ago
- A ready-made template for a project based on libpeconv.☆43Updated 3 months ago
- Decrement Windows Kernel for fun and profit☆38Updated 7 years ago
- A driver that hooks C: volume using symbolic link callback to track all FS access to the volume☆103Updated 4 years ago
- Adding exceptions to Microsoft's Control Flow Guard (CFG)☆59Updated 8 years ago
- Miscellaneous Code and Docs☆77Updated last year
- WinXPSP2.Cermalus on stereoids, supporting all 32 bits Windows version. Windows Kernel Virus stuff for noobs☆17Updated last year
- Retrieve pointers to undocumented kernel functions and offsets to members within undocumented structures to use in your driver by using t…☆53Updated 5 years ago
- Virtualization detection through speculative execution PoCs and papers☆67Updated 6 years ago
- A small library helping to parse commandline parameters (for C/C++)☆54Updated last year
- IA32-doc is a project which aims to put as many definitions from the Intel Manual into machine-processable format as possible☆16Updated 2 years ago
- A local copy of Alex Ionescu's seemingly abandoned native-nt-toolkit project containing knowledge inherited from the ReactOS project.☆54Updated 5 years ago