t3ssellate / unmapper
An automatic tool for fixing dumped PE files
☆41Updated 4 years ago
Related projects ⓘ
Alternatives and complementary repositories for unmapper
- ☆66Updated 3 years ago
- Resolve DOS MZ executable symbols at runtime☆93Updated 3 years ago
- Bypassing code hooks detection in modern anti-rootkits via building faked PTE entries.☆73Updated 13 years ago
- This is a simple driver with x64 inline assembly☆53Updated 4 years ago
- A library for intel VT-x hypervisor functionality supporting EPT shadowing.☆48Updated 3 years ago
- x64 Windows implementation of virtual-address to physical-address translation☆41Updated 3 years ago
- Obfuscate calls to imports by patching in stubs☆64Updated 3 years ago
- (DEPRECATED) A simple anti-anti debug library for Windows☆29Updated 4 years ago
- A reflexive driver loader to bypass Windows DSE (featuring a custom PE loader)☆38Updated 6 years ago
- Helper script for Windows kernel debugging with IDA Pro on VMware + GDB stub (including PDB symbols)☆61Updated last year
- Retrieve pointers to undocumented kernel functions and offsets to members within undocumented structures to use in your driver by using t…☆53Updated 5 years ago
- File system minifilter driver for Windows to block symbolic link attacks.☆51Updated 3 years ago
- Automated Integration of anti-Reversing methods in PE executables☆48Updated 6 years ago
- Examples of Static and Dynamic Thread Local Storage Callback Creation☆19Updated 7 years ago
- Bypasses for Windows kernel callbacks PatchGuard protection☆42Updated 3 years ago
- This is the P.O.C source for hooking the system calls on Windows 10 (1903) using it's dynamic trace feature weakness☆51Updated 5 years ago
- ☆25Updated 3 years ago
- ☆57Updated 2 years ago
- A virtualization-based endpoint security solution for Windows☆86Updated 3 years ago
- vdk is a set of utilities used to help with exploitation of a vulnerable driver.☆39Updated 2 years ago
- x64 syscall caller in C++.☆84Updated 6 years ago
- Binary rewriter for 64-bit PE files.☆43Updated 9 months ago
- based on https://github.com/secrary/Hooking-via-InstrumentationCallback☆67Updated 5 years ago
- D☆38Updated 3 years ago
- Dump system call codes, names, and offsets from Ntdll.dll☆71Updated last year
- IA32-doc is a project which aims to put as many definitions from the Intel Manual into machine-processable format as possible☆16Updated 2 years ago
- Documenting system information classes and their uses☆50Updated 3 years ago
- A poc that abuses Enclave☆36Updated 2 years ago
- PoC for hiding PE exports☆65Updated 3 years ago
- A quick-and-dirty anti-hook library proof of concept.☆101Updated 6 years ago