stormshield / HiveSwarming
Convert .reg to registry hive and reciprocally, without elevation
☆13Updated last year
Related projects ⓘ
Alternatives and complementary repositories for HiveSwarming
- Example/starter code for custom Windows application compatibility shims☆31Updated 3 years ago
- ASUSTeK AsIO3 I/O driver unlock☆19Updated 3 years ago
- ☆41Updated 7 years ago
- An x64dbg plugin which marks XFG call signatures as data☆72Updated last year
- Exploiting ring0 memcpy-like functionality to disable Driver Signing Enforcement (DSE)☆20Updated 4 years ago
- Windows NT port of 'Main is usually a function. So then when is it not?'☆24Updated 8 months ago
- x64dbg scripts for finding OEP of packers☆14Updated 6 years ago
- This repository contains some tools that I have written in the past☆26Updated last year
- A collection of tools, source code, and papers researching Windows' implementation of CET.☆74Updated 4 years ago
- C Header Only Library for Virii☆9Updated 4 years ago
- Research on obfuscated licensing APIs / CLIP service in the Windows kernel☆86Updated 2 years ago
- Static library and headers for linking your software with ntdll.dll☆30Updated 4 years ago
- Command line utility for copying files on NTFS using low level disk access☆32Updated 8 months ago
- ☆17Updated 3 years ago
- Taking advantage of CRT initialization, to get away with hooking protected applications☆43Updated 2 years ago
- Code Integrity Violation Spotter☆17Updated 5 months ago
- Simple library to handle PE files loading, relocating, get/set data, ..., in addition to process handling☆30Updated 5 years ago
- Support Windows OS Reversing by searching easily for references to functions across many DLLs☆33Updated 2 years ago
- Listing UDP connections with remote address without sniffing.☆30Updated last year
- Windows x86 Hardware Breakpoint class for Windows >Vista☆22Updated 8 years ago
- A Binary Ninja plugin to deobfuscate Themida, WinLicense and Code Virtualizer 3.x's mutation-based obfuscation.☆21Updated 3 months ago
- Exploits I've authored☆59Updated 5 years ago
- Windows x64 Process Scanner to detect application compatability shims☆36Updated 6 years ago
- Runs programs as TrustedInstaller☆48Updated 5 years ago
- Send SECURE_ERASE_UNIT and SANITIZE_DEVICE ATA command to hard disks☆45Updated 10 years ago
- r0ak ("roak") is the Ring 0 Army Knife -- A Command Line Utility To Read/Write/Execute Ring Zero on for Windows 10 Systems☆26Updated 6 years ago
- An example of Windows NT Native API application and kernel driver☆20Updated 4 years ago
- ☆18Updated 7 years ago