vineetgaurav / WIN_JELLY
Windows GPU rootkit PoC by Team Jellyfish
☆35Updated 9 years ago
Alternatives and similar repositories for WIN_JELLY:
Users that are interested in WIN_JELLY are comparing it to the libraries listed below
- ☆16Updated 3 years ago
- ☆31Updated 4 years ago
- Another Portable Executable files analysing stuff☆20Updated 13 years ago
- ☆20Updated 3 years ago
- Remote PE reflective injection with a simple reflective loader☆31Updated 5 years ago
- Clone running process with ZwCreateProcess☆57Updated 4 years ago
- ☆11Updated 5 years ago
- ☆12Updated 4 years ago
- NT AUTHORITY\SYSTEM☆38Updated 4 years ago
- really ?☆12Updated last year
- ☆22Updated 4 years ago
- Six cases demonstrating methods of optimizing GetProcAddress☆17Updated 3 years ago
- A small library helping to parse commandline parameters (for C/C++)☆54Updated last year
- A simple example on how to initiate a direct syscall on WoW64☆11Updated 7 years ago
- ☆15Updated 4 years ago
- A C port of b33f's UrbanBishop☆38Updated 4 years ago
- A small commented POC for removing API hooks placed by AV/EDR.☆33Updated 4 years ago
- ☆24Updated 3 years ago
- "An Introduction to Windows Exploit Development" is an open sourced, free Windows exploit development course I created for the Southeast …☆39Updated 4 years ago
- A demo implementation of a well-known technique used by some malware to evade userland hooking, using my library: libpeconv.☆19Updated 6 years ago
- Process Hollowing demonstration & explanation☆35Updated 4 years ago
- Example for PagedOut!☆24Updated 5 years ago
- Create a C++ PE which loads an XTEA-crypted .NET PE shellcode in memory.☆16Updated 6 years ago
- A more advanced free and open .NET obfuscator using dnlib.☆10Updated 2 years ago
- Parser for a custom executable format from Hidden Bee malware (first stage)☆39Updated 5 months ago
- A PoC tool for exploiting leaked process and thread handles☆30Updated last year
- Just another casual shellcode native loader☆24Updated 3 years ago
- A PoC to demo modifying cmdline of the child process dynamically. It might be useful against process log tracing, AV or EDR.☆38Updated 4 years ago
- Execute shellcode with ZwCreateSection, ZwMapViewOfSection, ZwOpenProcess, ZwMapViewOfSection and ZwCreateThreadEx☆14Updated 3 years ago
- A simple PE loader.☆26Updated 2 years ago