therealdreg / phook

Related projects ⓘ

Alternatives and complementary repositories for phook

• hasherezade / loaderine
  A demo implementation of a well-known technique used by some malware to evade userland hooking, using my library: libpeconv.
  ☆19Updated 6 years ago
• swwwolf / obderef
  Decrement Windows Kernel for fun and profit
  ☆38Updated 6 years ago
• deroko / SPPLUAObjectUacBypass
  ☆45Updated 6 years ago
• danielplohmann / empty_msvc
  A collection of empty MSVC projects, compiled using various versions and configurations of Visual Studio.
  ☆30Updated 4 months ago
• JKornev / hijacken
  Analyze and attack windows applications using dll hijacking vulnerabilities
  ☆55Updated 5 years ago
• BreakingMalwareResearch / CFGExceptions
  Adding exceptions to Microsoft's Control Flow Guard (CFG)
  ☆58Updated 8 years ago
• securesean / Shim-Process-Scanner
  Windows x64 Process Scanner to detect application compatability shims
  ☆36Updated 6 years ago
• Microwave89 / syscalltest
  PoC for Bypassing UM Hooks By Bruteforcing Intel Syscalls
  ☆39Updated 8 years ago
• eschweiler / ProReversing
  Open and generic Anti-Anti Reversing Framework. Works in 32 and 64 bits.
  ☆64Updated 12 years ago
• OsandaMalith / ApiMon
  A simple API monitor for Windbg
  ☆62Updated 7 years ago
• deroko / activationcontexthook
  ☆33Updated 7 years ago
• atlantis2013 / Evasion-Tools
  Anti-technique Codes, Detection of Anti-technique codes
  ☆37Updated 11 years ago
• marcusbotacin / Anti.Analysis
  Malware Analysis, Anti-Analysis, and Anti-Anti-Analysis
  ☆43Updated 7 years ago
• RceNinja / Re-Scripts
  ☆33Updated 3 years ago
• Fyyre / directntapi
  DirectNtApi - simple method to make ntapi function call without importing or walking export table. Work under Windows 7, 8 and 10
  ☆52Updated 7 months ago
• rwfpl / rewolf-ldrdebug
  Helper utility for debugging windows PE/PE+ loader.
  ☆50Updated 9 years ago
• Jb05s / Exploit-Dev-C
  ☆22Updated 4 years ago
• maldevel / driver-loader
  Load a Windows Kernel Driver
  ☆90Updated 7 years ago
• hasherezade / pe_utils
  A set of small utilities, helpers for PIN tracers
  ☆31Updated last year
• Truneski / WindowsKernelProgramming-Exercises
  ☆49Updated 4 years ago
• hatRiot / DelayLoadInject
  Code injection via delay load libraries
  ☆34Updated 7 years ago
• nccgroup / ncloader
  A session-0 capable dll injection utility
  ☆76Updated 6 years ago
• redplait / armpatched
  clone of armadillo patched for windows
  ☆46Updated 2 weeks ago
• Cr4sh / DrvHide-PoC
  Hidden kernel mode code execution for bypassing modern anti-rootkits.
  ☆80Updated 13 years ago
• hasherezade / libpeconv_tpl
  A ready-made template for a project based on libpeconv.
  ☆40Updated 2 weeks ago
• georgenicolaou / HeavenInjector
  Simple proof of concept code for injecting libraries on 64bit processes from a 32bit process
  ☆93Updated 6 years ago
• 86hh / POC-viruses
  POC viruses I have created to demo some ideas
  ☆59Updated 4 years ago
• yardenshafir / CallbackObjectAnalyzer
  Dumps information about all the callback objects found in a dump file and the functions registered for them
  ☆34Updated 4 years ago
• hugsy / hevd
  Public repository for HEVD exploits
  ☆20Updated 6 years ago