wecooperate / iSwordSDKLinks
iSwordSDK (Provide Powerful Kernel API For Ring3 Applications)
☆15Updated 3 years ago
Alternatives and similar repositories for iSwordSDK
Users that are interested in iSwordSDK are comparing it to the libraries listed below
Sorting:
- 横向移动三剑客 ( Lateral movement tools)☆30Updated 3 years ago
- Hide Port In Windows☆40Updated 9 months ago
- Convert native dll to shellcode, and support exported function☆22Updated 4 years ago
- 从admin冲到TrustedInstaller☆17Updated 2 years ago
- This is a random process injector, and more injection techniques will be added in the future.☆13Updated 5 years ago
- Open-source EDR kernel-component for system monitoring and DLL injection☆31Updated 4 years ago
- ☆32Updated 5 years ago
- ☆40Updated 3 years ago
- IAT-Obfuscation to make static analysis of executable harder.☆44Updated 3 years ago
- Demo to show how write ALPC Client & Server using native Ntdll.dll syscalls.☆21Updated 3 years ago
- Process Hollowing Packer☆28Updated 7 years ago
- Windows Kernel Knowledge && Collect Resources on the wire && Nothing innovation by myself &&☆56Updated 2 months ago
- 关闭恶意驱动的文件和注册表保护☆13Updated 3 years ago
- 编译时混淆字符串,以确保生成的二进制PE不会暴漏明文字符串。(C++ 14 及以上)☆26Updated 3 years ago
- Windows Sandbox Framework☆39Updated 3 years ago
- Just another version of the custom stack call from Proxy-Function-Calls-For-ETwTI☆35Updated 2 years ago
- A kernel mode Windows rootkit in development.☆49Updated 3 years ago
- ☆26Updated 3 years ago
- Windows CVE主防(HIPS/HIDS)☆56Updated 4 years ago
- ☆38Updated 5 years ago
- 参考taviso的代码逆向一下mpengine.dll☆20Updated 3 years ago
- A flexible tool that creates a minidump of the LSASS process☆13Updated 3 years ago
- ☆35Updated 4 years ago
- Phantom DLL Hollowing method implemented in modmap☆18Updated 4 years ago
- SyscallLoader☆11Updated 3 years ago
- Protected Process (Light) Dump: Uses Zemana AntiMalware Engine To Open a Privileged Handle to a PP/PPL Process And Inject MiniDumpWriteDu…☆24Updated 5 years ago
- POC of PPID spoofing using NtCreateUserProcess with syscalls to create a suspended process and performing process injection by overwritti…☆41Updated 3 years ago
- COM Explorer☆15Updated 5 months ago
- RPC Monitor based on The ETW Microsoft-Windows-Rpc provider☆24Updated 5 years ago
- Kill Protected Process Light Process (include av)☆58Updated last year