wangda38 / vmShell_ProtectLinks
☆21Updated 3 years ago
Alternatives and similar repositories for vmShell_Protect
Users that are interested in vmShell_Protect are comparing it to the libraries listed below
Sorting:
- 利用物理内存映射,实现虚拟内存的伪隐藏☆84Updated 3 years ago
- https://key08.com/index.php/2021/10/19/1375.html☆71Updated 3 years ago
- Kill Protected Process Light Process (include av)☆58Updated 2 years ago
- 简单安排一下 autochk.sys 这个rootkit☆73Updated 2 years ago
- IDA Python script for generating Windows x86 shellcode with one click☆38Updated 2 years ago
- 整合Pluto-Obfuscator和goron部分混淆,移植到LLVM-16.0.x,使用NewPassManager☆130Updated 2 years ago
- Session0注入: 用于实现对系统进程的远程线程注入☆14Updated 2 years ago
- 编译时混淆字符串,以确保生成的二进制PE不会暴漏明文字符串。(C++ 14 及以上)☆28Updated 3 years ago
- A simple python script to check evil Visual Studio projects☆20Updated last year
- ☆18Updated 3 years ago
- 大数字驱动逆向代码☆74Updated last year
- Call NtCreateUserProcess directly as normal.☆74Updated 3 years ago
- 针对windows rootkit的一些检测,分别从进程、端口、文件这三个方面进行检测。☆21Updated 8 months ago
- IAT-Obfuscation to make static analysis of executable harder.☆44Updated 4 years ago
- windwos内核研究与驱动Code☆66Updated 3 years ago
- about how to make a anti-virus engine☆89Updated 4 months ago
- 无痕注入1☆77Updated 4 years ago
- ☆33Updated 2 years ago
- sc4cpp is a shellcode framework based on C++☆90Updated 4 years ago
- A simple program to obfuscate code written in cpp.☆51Updated last year
- Enum and Remove Hook in Windows☆38Updated 2 weeks ago
- Hook NtDeviceIoControlFile with PatchGuard☆108Updated 3 years ago
- abusing signed pdfwkrnl.sys for kernel function calling from usermode.☆20Updated last week
- 非编译时代码混淆,包括代码块拆分、代码乱序、常量加密、代码变异、抹除jcc、局部混淆等,主要提供框架以及思路☆31Updated 2 years ago
- Windows Kernel Knowledge && Collect Resources on the wire && Nothing innovation by myself &&☆57Updated this week
- Windows API Call Obfuscation☆109Updated 2 years ago
- bootkit驱动映射,三环进程注入加载指定模块☆14Updated 11 months ago
- Free(or force?)file and delete it☆12Updated 6 years ago
- 内存加载DLL 支持X86和X64(Memory PELoader Support X86 and X64)☆36Updated 2 years ago
- CVE-2022-3699 with arbitrary kernel code execution capability☆70Updated 2 years ago