thecatenjoyer / singlestep_xorstub
Stub for polymorphic code
☆12Updated last year
Related projects ⓘ
Alternatives and complementary repositories for singlestep_xorstub
- Native Powers Talk demos☆14Updated last year
- call gates as stable comunication channel for NT x86 and Linux x86_64☆30Updated last year
- A more reliable way of resolving syscall numbers in Windows☆49Updated 8 months ago
- havoc kaine plugin to mitigate PAGE_GUARD protected image headers using JOP gadgets☆23Updated 3 months ago
- Your NTDLL vaccine from modern direct syscall methods.☆35Updated 2 years ago
- ☆12Updated last year
- Attack chain emulator. Write recipes for initial access easily☆20Updated last year
- A PE parser written in C++ which does not uses OOP. Helpful if you want to learn about PE parsing.☆15Updated last year
- ☆26Updated 11 months ago
- Analysis of the vulnerability☆46Updated 9 months ago
- NT AUTHORITY\SYSTEM☆38Updated 4 years ago
- Windows GPU rootkit PoC by Team Jellyfish☆35Updated 9 years ago
- Splitting and executing shellcode across multiple pages☆99Updated last year
- Sleep obfuscation☆47Updated this week
- CVE-2024-40431+CVE-2022-25479 chain for EOP(DATA ONLY ATTACK)☆43Updated 3 weeks ago
- Research of modifying exported function names at runtime (C/C++, Windows)☆16Updated 5 months ago
- A Practical example of ELAM (Early Launch Anti-Malware)☆30Updated 2 years ago
- Implementation of an export address table protection mitigation, like Export Address Filtering (EAF)☆92Updated last year
- Collect Windows telemetry for Maldev☆36Updated this week
- "An Introduction to Windows Exploit Development" is an open sourced, free Windows exploit development course I created for the Southeast …☆39Updated 4 years ago
- Progress of learning kernel development☆14Updated last year
- Piece of code to detect and remove hooks in IAT☆58Updated 2 years ago
- This repo for Windows x32-x64 Kernel/Driver/User Mode Exploitation writeups and exploits☆22Updated 6 months ago
- Here are some of my malware reversing papers that I will be publishing☆31Updated 2 years ago
- In-memory hiding technique☆43Updated 5 months ago
- ☆14Updated 2 years ago
- ☆16Updated 2 years ago
- API Hammering with C++20☆34Updated 2 years ago
- yet another sleep encryption thing. also used the default github repo name for this one.☆69Updated last year