Alternatives and similar repositories for singlestep_xorstub

Users that are interested in singlestep_xorstub are comparing it to the libraries listed below

• Cracked5pider / unguard-eat
  havoc kaine plugin to mitigate PAGE_GUARD protected image headers using JOP gadgets
  ☆34Updated last year
• therealdreg / dregate
  call gates as stable comunication channel for NT x86 and Linux x86_64
  ☆32Updated 2 years ago
• frank2 / blenny
  A payload delivery system which embeds payloads in an executable's icon file!
  ☆74Updated last year
• Foolish1337 / kernel-programming
  Progress of learning kernel development
  ☆14Updated 2 years ago
• ic3qu33n / michelangelo-reanimator
  Michelangelo REanimator bootkit and REcon 2023 talk slides/materials
  ☆30Updated last year
• DeDf / ParseNTFS
  ☆19Updated 4 years ago
• rad9800 / RansomFS
  ☆32Updated 6 months ago
• synacktiv / windows_kernel_shadow_stack
  Proof of concepts demonstrating some aspects of the Windows kernel shadow stack mitigation.
  ☆51Updated 3 months ago
• Stuuxx / awesome-persistence
  Persistence techniques for windows.
  ☆19Updated 2 years ago
• winterknife / EVENSTAR
  Intel 64/Windows low-level experiments
  ☆62Updated last month
• rbmm / TL-TASK
  ☆20Updated last week
• HACKE-RC / peritux
  A PE parser written in C++ which does not uses OOP. Helpful if you want to learn about PE parsing.
  ☆18Updated 2 years ago
• xalicex / kernel-debug-lab-for-virtual-box
  How to set up 2 VirtualBox VM to debug kernel driver using windbg
  ☆55Updated 3 years ago
• Slowerzs / KeyJumper
  ☆50Updated 6 months ago
• mgrube / recon_22
  ☆10Updated 3 years ago
• NUL0x4C / GP
  using the gpu to hide your payload
  ☆59Updated 3 years ago
• rad9800 / BloatedHammer
  API Hammering with C++20
  ☆49Updated 3 years ago
• forrest-orr / WizardOpium
  Google Chrome Use After Free
  ☆59Updated 3 years ago
• 7eRoM / tutorials
  ☆16Updated 4 months ago
• Signal-Labs / Hotpatching_PoC
  ☆22Updated 2 years ago
• rxOred / process-hollowing
  process hollowing variant using NtCreateSection + NtMapViewOfSection + ResumeThread
  ☆31Updated 3 years ago
• zodiacon / NativePowers
  Native Powers Talk demos
  ☆14Updated last year
• yoavshah / ImportlessApi
  ☆17Updated last year
• CaptainNox / Hypnos
  A more reliable way of resolving syscall numbers in Windows
  ☆52Updated last year
• SpiralBL0CK / CVE-2024-40431-CVE-2022-25479-EOP-CHAIN
  CVE-2024-40431+CVE-2022-25479 chain for EOP(DATA ONLY ATTACK)
  ☆45Updated 11 months ago
• 20urc3 / Aplos
  Aplos an extremely simple fuzzer for Windows binaries.
  ☆68Updated 7 months ago
• keyboardcrunch / sentinelone_usbscan
  A custom SentinelOne USB scanner.
  ☆18Updated 3 years ago
• qtc-de / rpv-web
  rpv-web is a browser based frontend for the rpv library
  ☆26Updated 4 months ago
• lleon1435 / Kernel_VADInjector
  Windows 10 DLL Injector via Driver utilizing VAD and hiding the loaded driver
  ☆50Updated last year
• Sh3lldon / WinPWN
  This repo for Windows x32-x64 Kernel/Driver/User Mode Exploitation writeups and exploits
  ☆24Updated last year