wangda38 / vmShell_ProtectLinks
☆20Updated 3 years ago
Alternatives and similar repositories for vmShell_Protect
Users that are interested in vmShell_Protect are comparing it to the libraries listed below
Sorting:
- IDA Python script for generating Windows x86 shellcode with one click☆37Updated last year
- https://key08.com/index.php/2021/10/19/1375.html☆68Updated 3 years ago
- 简单安排一下 autochk.sys 这个rootkit☆71Updated 2 years ago
- shellcode生成框架☆87Updated 11 months ago
- Windows Kernel Knowledge && Collect Resources on the wire && Nothing innovation by myself &&☆56Updated last week
- 利用物理内存映射,实现虚拟内存的伪隐藏☆83Updated 2 years ago
- Hide Port In Windows☆40Updated 8 months ago
- Kill Protected Process Light Process (include av)☆58Updated last year
- 非编译时代码混淆,包括代码块拆分、代码乱序、常量加密、代码变异、抹除jcc、局部混淆等,主要提供框架以及思路☆31Updated 2 years ago
- 简单版的PE加载器☆12Updated 4 years ago
- ☆31Updated last year
- 针对windows rootkit的一些检测,分别从进程、端口、文件这三个方面进行检测。☆19Updated 5 months ago
- A packer which adds encrypted shell to protect your PE file☆23Updated 7 months ago
- ☆22Updated 4 years ago
- Session0注入: 用于实现对系统进程的远程线程注入☆12Updated 2 years ago
- Detect BypassUAC using AMSI☆23Updated 4 months ago
- ☆19Updated 5 years ago
- 通杀检测基于白文件patch黑代码的免杀技术的后门☆166Updated 10 months ago
- 免杀计划任务进行权限维持,过主流杀软。 A schtask tool bypass anti-virus☆67Updated 2 years ago
- Generates x86, x64, or AMD64+x86 position-independent shellcode that loads .NET Assemblies, PE files, and other Windows payloads from mem…☆53Updated last year
- IAT-Obfuscation to make static analysis of executable harder.☆42Updated 3 years ago
- 常见反沙箱反虚拟机总结☆15Updated 7 months ago
- Simulate per-process disconnection in red team environments☆45Updated 3 weeks ago
- A tool that expands the size of the text section in a PE file without loss, supporting both 32-bit and 64-bit programs.☆33Updated last year
- ☆32Updated 4 years ago
- 将任何 elf 或命令转换为 shellcode☆16Updated last year
- Use COM Component Bypass UAC,Dll Version☆35Updated 4 years ago
- 个人学习使用,二开DcRAT,主要是增加了功能性插件☆17Updated last year
- Call NtCreateUserProcess directly as normal.☆71Updated 3 years ago
- windwos内核研究与驱动Code☆64Updated 3 years ago