smallzhong/hide_execute_memory external links

---

GitHub - View repository

GitHub.dev - Open in online code editor

Star history - Growth chart over time

deps.dev - Dependencies and security vulnerabilities

Gitingest - Export source code for LLM usage

Repomix - Export source code for LLM usage

uithub - Export source code for LLM usage

Close

smallzhong/hide_execute_memory

Readme badge preview -

If you own this repo, copy the snippet below and add it to your README.md

---

Copy

[![RelatedRepos](https://img.shields.io/badge/related-repos-yellow)](https://relatedrepos.com/gh/smallzhong/hide_execute_memory)

Close

smallzhong / hide_execute_memoryView on GitHubMore

• External links
• Readme badge

隐藏可执行内存

☆267Apr 27, 2025Updated 10 months ago

Alternatives and similar repositories for hide_execute_memory

Users that are interested in hide_execute_memory are comparing it to the libraries listed below

• FiYHer / kernel_window_hide

  View on GitHub
  内核级别隐藏指定窗口
  ☆320Feb 9, 2022Updated 4 years ago
• Rostelecom-Red-Team / GoodbyeEDR

  View on GitHub
  ☆81Dec 24, 2021Updated 4 years ago
• lainswork / dwm-screen-shot

  View on GitHub
  将shellcode注入dwm.exe以进行屏幕截取
  ☆356Mar 22, 2022Updated 3 years ago
• FiYHer / driver_callback_bypass_1909

  View on GitHub
  研究和移除各种内核回调,在anti anti cheat的路上越走越远
  ☆183Aug 26, 2022Updated 3 years ago
• huoji120 / DuckSandboxDetect

  View on GitHub
  沙箱测试,测评国内常见沙箱的代码与结论
  ☆107Jul 3, 2021Updated 4 years ago
• An0nySec / ShadowUser

  View on GitHub
  影子用户 克隆
  ☆232Dec 30, 2021Updated 4 years ago
• crisprss / Shellcode_Memory_Loader

  View on GitHub
  基于Golang实现的Shellcode内存加载器,共实现3中内存加载shellcode方式,UUID加载,MAC加载和IPv4加载,目前能过主流杀软(包括Windows Defender)
  ☆253Dec 16, 2021Updated 4 years ago
• DragonQuestHero / DwmDraw

  View on GitHub
  不使用3环挂钩进行DWM桌面绘制
  ☆82Dec 9, 2021Updated 4 years ago
• crisprss / BypassUserAdd

  View on GitHub
  通过反射DLL注入、Win API、C#、以及底层实现NetUserAdd方式实现BypassAV进行增加用户的功能,实现Cobalt Strike插件化
  ☆344Apr 10, 2022Updated 3 years ago
• mai1zhi2 / ShellCodeFramework

  View on GitHub
  绕3环的shellcode免杀框架
  ☆574Mar 19, 2021Updated 4 years ago
• Airboi / bypass-av-note

  View on GitHub
  免杀技术大杂烩---乱拳也打不死老师傅
  ☆1,094Mar 29, 2021Updated 4 years ago
• An0nySec / UserAdd

  View on GitHub
  Bypass AV 用户添加
  ☆169Dec 30, 2021Updated 4 years ago
• cs1ime / KernelDwm

  View on GitHub
  Kernel dwm render
  ☆168Oct 10, 2023Updated 2 years ago
• SDXT / MMInject

  View on GitHub
  Kernel DLL Injector using NX Bit Swapping and VAD hide for hiding injected DLL
  ☆219Nov 12, 2020Updated 5 years ago
• cs1ime / sehcall

  View on GitHub
  Windows X64 mode use seh in manual mapped dll or manual mapped sys
  ☆80Oct 10, 2022Updated 3 years ago
• sf197 / GetPwd

  View on GitHub
  用CSharp写的一款信息搜集工具，目前支持Navicat、TeamView、Xshell、SecureCRT产品的密码解密
  ☆251Aug 26, 2020Updated 5 years ago
• weak1337 / BE-Shellcode

  View on GitHub
  Code for Battleyes shellcode
  ☆239Nov 11, 2021Updated 4 years ago
• cs1ime / DICHook

  View on GitHub
  Hook NtDeviceIoControlFile with PatchGuard
  ☆107May 10, 2022Updated 3 years ago
• knightswd / ProcessGhosting

  View on GitHub
  ☆74Jul 23, 2021Updated 4 years ago
• zhuhuibeishadiao / PFHook

  View on GitHub
  Page fault hook use ept (Intel Virtualization Technology)
  ☆200Oct 19, 2016Updated 9 years ago
• huoji120 / CobaltStrikeDetected

  View on GitHub
  40行代码检测到大部分CobaltStrike的shellcode
  ☆294Jul 25, 2021Updated 4 years ago
• zouxianyu / KernelHiddenExecute

  View on GitHub
  Hide codes/data in the kernel address space.
  ☆188May 8, 2021Updated 4 years ago
• IcEy-999 / Ntoskrnl_Viewer

  View on GitHub
  可在非测试模式下符号化读取内核内存。Kernel memory can be read symbolically in non test mode。
  ☆109Sep 1, 2022Updated 3 years ago
• uknowsec / CreateService

  View on GitHub
  创建服务持久化
  ☆108Apr 26, 2021Updated 4 years ago
• MapleSwan / enum_real_dirbase

  View on GitHub
  从MmPfnData中枚举进程和页目录基址
  ☆205Aug 18, 2023Updated 2 years ago
• FiYHer / InfinityHookPro

  View on GitHub
  InfinityHookPro Win7 -> Win11 latest
  ☆551Feb 7, 2023Updated 3 years ago
• crisprss / PetitPotam

  View on GitHub
  替代PrintBug用于本地提权的新方式，主要利用MS-EFSR协议中的接口函数 借鉴了Potitpotam中对于EFSR协议的利用,实现了本地提权的一系列方式 Drawing on the use of the EFSR protocol in Potitpotam, …
  ☆149Mar 13, 2022Updated 3 years ago
• qq1045551070 / ShotHv

  View on GitHub
  ShotHv
  ☆154Mar 8, 2022Updated 3 years ago
• b0bac / GetMail

  View on GitHub
  利用NTLM Hash读取Exchange邮件
  ☆441Jan 7, 2025Updated last year
• Yihsiwei / GetOut360

  View on GitHub
  强制关闭360 需要管理员权限
  ☆171Feb 6, 2022Updated 4 years ago
• A-Normal-User / Pretend_HideVirtualMemory

  View on GitHub
  利用物理内存映射，实现虚拟内存的伪隐藏
  ☆86Sep 15, 2022Updated 3 years ago
• timwhitez / CLR-RWX

  View on GitHub
  Load CLR to get RWX 通过加载clr在自身内存中产生rwx空间
  ☆22Sep 28, 2022Updated 3 years ago
• FunnyWolf / TFirewall

  View on GitHub
  防火墙出网探测工具,内网穿透型socks5代理
  ☆269Nov 12, 2021Updated 4 years ago
• zha0gongz1 / iscsicpl_bypassUAC

  View on GitHub
  UAC bypass for x64 Windows 7 - 11（无弹窗版）
  ☆281Sep 5, 2022Updated 3 years ago
• KANKOSHEV / Detect-KeAttachProcess

  View on GitHub
  Detect-KeAttachProcess by iterating through all processes as well as checking the context of the thread.
  ☆121Feb 8, 2022Updated 4 years ago
• timwhitez / Doge-CSBridge

  View on GitHub
  CS http Dynamic Encrypt Bridge.
  ☆47Nov 12, 2021Updated 4 years ago
• seventeenman / CallBackDump

  View on GitHub
  dump lsass进程工具
  ☆561Jul 20, 2023Updated 2 years ago
• mai1zhi2 / SharpBeacon

  View on GitHub
  CobaltStrike Beacon written in .Net 4 用.net重写了stager及Beacon，其中包括正常上线、文件管理、进程管理、令牌管理、结合SysCall进行注入、原生端口转发、关ETW等一系列功能
  ☆731Sep 1, 2021Updated 4 years ago
• 1401199262 / Hook-KdTrap

  View on GitHub
  ☆223Mar 11, 2023Updated 2 years ago