PoC for hiding PE exports
☆67Dec 19, 2020Updated 5 years ago
Alternatives and similar repositories for pexphide
Users that are interested in pexphide are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Disable PPL via custom driver and dump lsass☆15Mar 13, 2021Updated 5 years ago
- RunPE using Hell's Gate technique.☆31Dec 4, 2020Updated 5 years ago
- ☆23Jun 29, 2020Updated 6 years ago
- UnhookMe is an universal Windows API resolver & unhooker addressing problem of invoking unmonitored system calls from within of your Red …☆348Jul 3, 2022Updated 4 years ago
- ☆84Aug 26, 2024Updated 2 years ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- Driver demonstrating how to register a DPC to asynchronously wait on an object☆50Jan 15, 2021Updated 5 years ago
- Phantom DLL hollowing PoC☆373May 23, 2022Updated 4 years ago
- ☆19Jul 20, 2015Updated 11 years ago
- A windows kernel driver to Block symbolic link exploit used for privilege escalation.☆15Jul 30, 2020Updated 6 years ago
- ☆73Oct 24, 2021Updated 5 years ago
- ☆24Sep 26, 2021Updated 5 years ago
- Code Injector Using Code Caves☆15Jul 12, 2015Updated 11 years ago
- An example of how x64 kernel shellcode can dynamically find and use APIs☆103May 14, 2020Updated 6 years ago
- PE File Blessing - To continue or not to continue☆86Nov 23, 2019Updated 6 years ago
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- PoC: Exploit 32-bit Thread Snapshot of WOW64 to Take Over $RIP & Inject & Bypass Antivirus HIPS (HITB 2021)☆162May 27, 2021Updated 5 years ago
- A novel technique to communicate between threads using the standard ETHREAD structure☆116Feb 27, 2021Updated 5 years ago
- PoC to demonstrate how CLR ETW events can be tampered.☆187Mar 26, 2020Updated 6 years ago
- An automatic tool for fixing dumped PE files☆40Jul 28, 2020Updated 6 years ago
- Easily hook WIN32 x64 functions☆18Feb 19, 2025Updated last year
- A POC for Windows Extension Host hooking☆25Jul 13, 2019Updated 7 years ago
- A simple COM server which provides a component to run shellcode☆143May 12, 2020Updated 6 years ago
- Windows PE - TLS (Thread Local Storage) Injector in C/C++☆108Jan 3, 2021Updated 5 years ago
- ☆37May 9, 2019Updated 7 years ago
- Deploy open-source AI quickly and easily - Special Bonus Offer • AdRunpod Hub is built for open source. One-click deployment and autoscaling endpoints without provisioning your own infrastructure.
- ☆145Nov 24, 2025Updated 11 months ago
- Hijack Printconfig.dll to execute shellcode☆104Jan 15, 2021Updated 5 years ago
- A simple PoC to demonstrate that is possible to write Non writable memory and execute Non executable memory on Windows☆52Jun 14, 2021Updated 5 years ago
- A way to delete a locked file, or current running executable, on disk.☆616Nov 5, 2025Updated 11 months ago
- Simple header only library to change return address on current stack frame.☆21Sep 4, 2016Updated 10 years ago
- A collection of scripts used to support an OffSecOps pipeline.☆15Jan 31, 2021Updated 5 years ago
- Code Injection, Inject malicious payload via pagetables pml4.☆248Jul 7, 2021Updated 5 years ago
- Bypassing NTFS permissions to read any files as unprivileged user.☆194Oct 21, 2020Updated 6 years ago
- Position-idependent Windows DLL loader based on ReflectiveDLL project.☆103Nov 5, 2018Updated 7 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Reflective DLL Injection style process infector☆20Jul 23, 2018Updated 8 years ago
- An attempt to restore and adapt to modern Win10 version the 'Rootkit Arsenal' original code samples☆74Apr 11, 2022Updated 4 years ago
- Antivirus Emulator Fingerprints☆30Oct 12, 2018Updated 8 years ago
- A wrapper class to hide the original calling address of a function☆54Aug 9, 2020Updated 6 years ago
- Hook NtDeviceIoControlFile with PatchGuard☆103May 10, 2022Updated 4 years ago
- ChimeraPE (a PE injector type - alternative to: RunPE, ReflectiveLoader, etc) - a template for manual loading of EXE, loading imports pay…☆231Mar 22, 2023Updated 3 years ago
- A simple open source memory hooking library for Windows x86/x64☆89Nov 16, 2020Updated 5 years ago