vic4key / QLoader
QLoader is a PE loader creator that helps you quickly create a non-exe loader for application
☆103Updated 5 months ago
Alternatives and similar repositories for QLoader:
Users that are interested in QLoader are comparing it to the libraries listed below
- Create a new thread that will suspend every thread and encrypt its stack, then going to sleep , then decrypt the stacks and resume thread…☆159Updated last year
- Astral-PE is a low-level mutator (headers obfuscator) for native Windows PE files (x32/x64)☆100Updated this week
- Simple dotnet Native AOT app that uses AsmResolver to convert shellcode to PE☆65Updated last year
- Detects virtual machines and malware analysis environments☆120Updated 2 years ago
- Implementation of Advanced Module Stomping and Heap/Stack Encryption☆215Updated last year
- PoC Anti-Rootkit/Anti-Cheat Driver.☆184Updated 6 months ago
- Block any Process to open HANDLE to your process , only SYTEM is allowed to open handle to your process ,with that you can avoid remote m…☆167Updated last year
- Bypassing PatchGuard on modern x64 systems☆255Updated last year
- Easy XOR string encryption for NET based binaries☆137Updated last year
- An x86-64 code virtualizer for VM based obfuscation☆109Updated 3 months ago
- A tool for detecting manual/direct syscalls in x86 and x64 processes using Nirvana Hooks.☆109Updated 3 years ago
- Collection of DLL function export forwards for DLL export function proxying☆95Updated last year
- ☆107Updated 2 years ago
- PoC: Rebuild A New Path Back to the Heaven's Gate (HITB 2021)☆103Updated 3 years ago
- Standalone Metasploit-like XOR encoder for shellcode☆47Updated 10 months ago
- A dynamic unpacking tool☆133Updated last year
- Various Process Injection Techniques☆148Updated 2 years ago
- Exploitation of echo_driver.sys☆169Updated last year
- A x64 PE Packer/Protector Developed in C++ and VisualStudio☆51Updated last year
- Process Injection via Component Object Model (COM) IRundown::DoCallback().☆58Updated 2 years ago
- Inline syscalls made for MSVC supporting x64 and WOW64☆178Updated last year
- This novel way of using NtQueueApcThreadEx by abusing the ApcRoutine and SystemArgument[0-3] parameters by passing a random pop r32; ret …☆242Updated last year
- CreateRemoteThread: how to pass multiple parameters to the remote thread function without shellcode.☆133Updated last year
- A nice process dumping tool☆78Updated 2 years ago
- 整合Pluto-Obfuscator和goron部分混淆,移植到LLVM-16.0.x,使用NewPassManager☆121Updated last year
- Use hardware breakpoints to spoof the call stack for both syscalls and API calls☆190Updated 9 months ago
- Proof of concept code for thread pool based process injection in Windows.☆115Updated this week
- ☆197Updated 2 years ago
- A universal binary patching dll.☆86Updated 5 months ago
- Packer compressing .net assemblies, (ab)using the PE format for data storage☆173Updated 2 years ago