Illustrates the concept of return address spoofing, and how it is used.
☆14May 13, 2020Updated 6 years ago
Alternatives and similar repositories for Return-address-spoofer
Users that are interested in Return-address-spoofer are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Hijack NotifyRoutine for a kernelmode thread☆39Jun 4, 2022Updated 4 years ago
- A minimalistic way to spoof return addresses without using exceptions☆21Jul 26, 2022Updated 4 years ago
- PointerGuard is a proof-of-concept tool used to create 'guarded' pointers which disguise pointer addresses, monitor reads/writes, and pre…☆55May 23, 2022Updated 4 years ago
- Windows kernel drivers simple HTTP library for modern C++☆41Jul 12, 2018Updated 8 years ago
- mash hypervisor host pml4☆16Jun 22, 2022Updated 4 years ago
- Serverless GPU API endpoints on Runpod - Get Bonus Credits • AdSkip the infrastructure headaches. Auto-scaling, pay-as-you-go, no-ops approach lets you focus on innovating your application.
- ☆117Aug 7, 2022Updated 4 years ago
- Some drivers I've written while solving exercises from Practical Reverse Engineering☆15Jan 9, 2022Updated 4 years ago
- A PoC for requesting HWIDs directly from hardware, skipping any potential hooks or OS support.☆89Mar 16, 2021Updated 5 years ago
- ☆58Jun 8, 2022Updated 4 years ago
- base for testing☆202Sep 28, 2024Updated 2 years ago
- Old way for blocking NMI interrupts☆30Sep 6, 2022Updated 4 years ago
- Neutralize KEPServerEX anti-debugging techniques☆33Feb 15, 2023Updated 3 years ago
- An example code of CiGetCertPublisherName☆15Mar 24, 2022Updated 4 years ago
- A proof of concept demonstrating instrumentation callbacks on Windows 10 21h1 with a TLS variable to ensure all syscalls are caught.☆168Nov 14, 2021Updated 4 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- UM-KM Communication using registry callbacks☆39Jun 8, 2020Updated 6 years ago
- ☆28May 17, 2022Updated 4 years ago
- clearing traces of a loaded driver☆48Jul 2, 2022Updated 4 years ago
- Static Library For Windows Drivers☆42Jun 19, 2026Updated 4 months ago
- An x64 page table iterator written in C++ as a kernel mode windows driver.☆122May 25, 2021Updated 5 years ago
- Experimental disassembler for x86 binaries virtualized by VMProtect 3☆97Aug 27, 2022Updated 4 years ago
- A lightweight x86/x64 VM☆18Feb 7, 2021Updated 5 years ago
- Not mine. Only for saving☆25Jun 28, 2022Updated 4 years ago
- Emulate Drivers in RING3 with self context mapping or unicorn☆21Jan 1, 2025Updated last year
- Proton VPN Special Offer - Get 70% off • AdSpecial partner offer. Trusted by over 100 million users worldwide. Tested, Approved and Recommended by Experts.
- ☆43Jul 1, 2022Updated 4 years ago
- Just an example of a well-known technique to detect memory tampering via Windows Working Sets.☆18Jan 15, 2022Updated 4 years ago
- Fixes the "Device\Nal is already in use" error on kdmapper.☆21Jan 9, 2023Updated 3 years ago
- Feature-rich C99 library for memory scanning purposes, designed for Windows running machines, meant to work on both 32-bit and 64-bit por…☆29Feb 7, 2026Updated 8 months ago
- kernel driver used to monitor the activity of BadlionAnticheat.sys by patching its IAT☆32Jul 9, 2021Updated 5 years ago
- ☆144Jan 13, 2021Updated 5 years ago
- This project will give you an example how you can hook a kernel vtable function that cannot be directly called☆81Dec 25, 2021Updated 4 years ago
- UD overlay using SetWindowsHookEx☆17Apr 29, 2022Updated 4 years ago
- ☆46Oct 19, 2021Updated 5 years ago
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- A client-sided anti-cheat developed during a freelance project to "plug-in" to a proprietary client for a private server. Includes memory…☆60Dec 26, 2020Updated 5 years ago
- ☆19May 17, 2022Updated 4 years ago
- ☆137Aug 6, 2022Updated 4 years ago
- Hook NtDeviceIoControlFile with PatchGuard☆103May 10, 2022Updated 4 years ago
- Walks the Process' VAD list to grab the PTE's corresponding to a usermode virtual address, all to get the physical address☆23Nov 22, 2021Updated 4 years ago
- Easy to include string and wstring obfuscation☆25Mar 12, 2022Updated 4 years ago
- A basic 100 loc CPU emulator using the existing code of ntoskrnl.exe☆74Aug 16, 2023Updated 3 years ago