PoC for hiding PE exports
☆67Dec 19, 2020Updated 5 years ago
Alternatives and similar repositories for pexphide
Users that are interested in pexphide are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Disable PPL via custom driver and dump lsass☆15Mar 13, 2021Updated 5 years ago
- PoC: Exploit 32-bit Thread Snapshot of WOW64 to Take Over $RIP & Inject & Bypass Antivirus HIPS (HITB 2021)☆163May 27, 2021Updated 5 years ago
- x64 manual mapper using inline syscalls☆10Jul 8, 2021Updated 5 years ago
- ☆17Apr 13, 2026Updated 5 months ago
- Antivirus Emulator Fingerprints☆30Oct 12, 2018Updated 8 years ago
- Bare Metal GPUs on DigitalOcean Gradient AI • AdPurpose-built for serious AI teams training foundational models, running large-scale inference, and pushing the boundaries of what's possible.
- A simple PoC to demonstrate that is possible to write Non writable memory and execute Non executable memory on Windows☆52Jun 14, 2021Updated 5 years ago
- ☆24Sep 26, 2021Updated 5 years ago
- ☆84Aug 26, 2024Updated 2 years ago
- RunPE using Hell's Gate technique.☆32Dec 4, 2020Updated 5 years ago
- UnhookMe is an universal Windows API resolver & unhooker addressing problem of invoking unmonitored system calls from within of your Red …☆347Jul 3, 2022Updated 4 years ago
- Phantom DLL hollowing PoC☆370May 23, 2022Updated 4 years ago
- Windows PE - TLS (Thread Local Storage) Injector in C/C++☆106Jan 3, 2021Updated 5 years ago
- A proof-of-concept tool that attempts to retrieve the configuration from the memory dump of an F-Secure C3 Relay executable.☆16Jul 2, 2021Updated 5 years ago
- ☆73Oct 24, 2021Updated 4 years ago
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- A collection of scripts used to support an OffSecOps pipeline.☆15Jan 31, 2021Updated 5 years ago
- ☆37May 9, 2019Updated 7 years ago
- A simple COM server which provides a component to run shellcode☆142May 12, 2020Updated 6 years ago
- Hijack Printconfig.dll to execute shellcode☆103Jan 15, 2021Updated 5 years ago
- Simple header only library to change return address on current stack frame.☆21Sep 4, 2016Updated 10 years ago
- Software Distribution Service☆12Jul 2, 2015Updated 11 years ago
- A novel technique to communicate between threads using the standard ETHREAD structure☆115Feb 27, 2021Updated 5 years ago
- Companion PoC for the "Adventures in Dynamic Evasion" blog post☆127May 25, 2021Updated 5 years ago
- A more stealthy variant of "DLL hollowing"☆369Mar 8, 2024Updated 2 years ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- inject shellcode into remote process via message hook☆15Oct 28, 2020Updated 5 years ago
- Some source code to demonstrate avoiding certain direct syscall detections by locating and JMPing to a legitimate syscall instruction wit…☆218Feb 20, 2023Updated 3 years ago
- An example of how x64 kernel shellcode can dynamically find and use APIs☆103May 14, 2020Updated 6 years ago
- Code Injection, Inject malicious payload via pagetables pml4.☆245Jul 7, 2021Updated 5 years ago
- A way to delete a locked file, or current running executable, on disk.☆617Nov 5, 2025Updated 11 months ago
- A POC for Windows Extension Host hooking☆25Jul 13, 2019Updated 7 years ago
- A modified RunPE (process hollowing) technique avoiding the usage of SetThreadContext by appending a TLS section which calls the original…☆94Sep 26, 2019Updated 7 years ago
- PoC to demonstrate how CLR ETW events can be tampered.☆189Mar 26, 2020Updated 6 years ago
- ☆23Jun 29, 2020Updated 6 years ago
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- Call 32bit NtDLL API directly from WoW64 Layer☆61Nov 18, 2020Updated 5 years ago
- Userland API Unhooker Project☆111Apr 4, 2026Updated 6 months ago
- Project to check which Nt/Zw functions your local EDR is hooking☆200Mar 21, 2021Updated 5 years ago
- 滥用cow机制进行全局注入☆95Jan 1, 2021Updated 5 years ago
- PoC MSVC COFF Object file loader/injector.☆189Mar 19, 2021Updated 5 years ago
- Process Ghosting - a PE injection technique, similar to Process Doppelgänging, but using a delete-pending file instead of a transacted fi…☆698Mar 11, 2024Updated 2 years ago
- Driver demonstrating how to register a DPC to asynchronously wait on an object☆50Jan 15, 2021Updated 5 years ago