wangda38 / vmShell_Protect

Related projects ⓘ

Alternatives and complementary repositories for vmShell_Protect

• huoji120 / numen
  简单安排一下 autochk.sys 这个rootkit
  ☆67Updated last year
• huoji120 / Etw-Syscall
  https://key08.com/index.php/2021/10/19/1375.html
  ☆62Updated 2 years ago
• huoji120 / ACPI_SANDBOX_DETECT
  通过ACPI检测沙箱
  ☆43Updated last year
• Neo-Maoku / Shellcode_Generator
  IDA Python script for generating Windows x86 shellcode with one click
  ☆34Updated last year
• xf555er / Session0_Inject
  Session0注入: 用于实现对系统进程的远程线程注入
  ☆11Updated last year
• A-Normal-User / Pretend_HideVirtualMemory
  利用物理内存映射，实现虚拟内存的伪隐藏
  ☆72Updated 2 years ago
• huoji120 / white_patch_detect
  通杀检测基于白文件patch黑代码的免杀技术的后门
  ☆97Updated 3 months ago
• bopin2020 / WindowsCamp
  Windows Kernel Knowledge && Collect Resources on the wire && Nothing innovation by myself &&
  ☆51Updated 2 months ago
• mizukiyyds / asm_obfuscator
  非编译时代码混淆，包括代码块拆分、代码乱序、常量加密、代码变异、抹除jcc、局部混淆等，主要提供框架以及思路
  ☆29Updated last year
• D0pam1ne705 / Direct-NtCreateUserProcess
  Call NtCreateUserProcess directly as normal.
  ☆66Updated 2 years ago
• M0rtale / KernelDel
  Free(or force?)file and delete it
  ☆11Updated 5 years ago
• KX-Lau / PELoader
  简单版的PE加载器
  ☆12Updated 4 years ago
• grace2017 / SecondProcess
  过TP驱动
  ☆28Updated 4 years ago
• android1337 / crycall
  Compile-Time Calls Obfuscator for C++14+
  ☆34Updated 11 months ago
• LegendSaber / exp_x64
  ☆23Updated 2 years ago
• BeneficialCode / KPPL
  Kill Protected Process Light Process (include av)
  ☆54Updated last year
• cs1ime / DICHook
  Hook NtDeviceIoControlFile with PatchGuard
  ☆101Updated 2 years ago
• baiyies / CrossInject
  32 bit process inject shellcode to 32 bit process and 64 bit process
  ☆28Updated last year
• kouzhudong / HidePort
  Hide Port In Windows
  ☆37Updated 3 weeks ago
• 0xTalShang / WindowsKernel
  windwos内核研究与驱动Code
  ☆60Updated 2 years ago
• 1401199262 / InstrumentationCallback
  ☆26Updated last year
• MahmoudZohdy / IAT-Obfuscation
  IAT-Obfuscation to make static analysis of executable harder.
  ☆41Updated 3 years ago
• iamasbcx / GfiRatClient
  ☆25Updated 3 years ago
• WBGlIl / mhydump
  ☆22Updated 3 years ago
• huoji120 / Microsoft_Kernel_Memory_Leak
  win32kbase!NtDCompositionCommitSynchronizationObject and win32kbase!NtGdiGetCertificate
  ☆14Updated 3 years ago
• Whitebird0 / Windows-kernel-learning-notes
  ☆15Updated 2 years ago
• jseclab / UGuardMap
  bootkit驱动映射，三环进程注入加载指定模块
  ☆11Updated last month