wecooperate / iSwordSDKLinks
iSwordSDK (Provide Powerful Kernel API For Ring3 Applications)
☆15Updated 3 years ago
Alternatives and similar repositories for iSwordSDK
Users that are interested in iSwordSDK are comparing it to the libraries listed below
Sorting:
- Hide Port In Windows☆40Updated 10 months ago
- 横向移动三剑客 ( Lateral movement tools)☆30Updated 3 years ago
- Convert native dll to shellcode, and support exported function☆22Updated 4 years ago
- 从admin冲到TrustedInstaller☆17Updated 2 years ago
- Windows Kernel Knowledge && Collect Resources on the wire && Nothing innovation by myself &&☆57Updated 2 months ago
- Demo to show how write ALPC Client & Server using native Ntdll.dll syscalls.☆21Updated 3 years ago
- Open-source EDR kernel-component for system monitoring and DLL injection☆31Updated 4 years ago
- This is a random process injector, and more injection techniques will be added in the future.☆13Updated 5 years ago
- IAT-Obfuscation to make static analysis of executable harder.☆44Updated 4 years ago
- Windows CVE主防(HIPS/HIDS)☆56Updated 4 years ago
- ☆32Updated 5 years ago
- Kill Protected Process Light Process (include av)☆58Updated last year
- A kernel mode Windows rootkit in development.☆49Updated 3 years ago
- Process Hollowing Packer☆28Updated 8 years ago
- Thanks to all those who helped me.☆20Updated 7 years ago
- 参考taviso的代码逆向一下mpengine.dll☆20Updated 3 years ago
- A simple parser(library) which extracts shimcache data from windows.☆15Updated 6 years ago
- 32 bit process inject shellcode to 32 bit process and 64 bit process☆36Updated 2 years ago
- Phantom DLL Hollowing method implemented in modmap☆18Updated 4 years ago
- shadow tls☆17Updated 2 years ago
- https://key08.com/index.php/2021/10/19/1375.html☆71Updated 3 years ago
- ☆40Updated 3 years ago
- 编译时混淆字符串,以确保生成的二进制PE不会暴漏明文字符串。(C++ 14 及以上)☆27Updated 3 years ago
- Protected Process (Light) Dump: Uses Zemana AntiMalware Engine To Open a Privileged Handle to a PP/PPL Process And Inject MiniDumpWriteDu…☆24Updated 5 years ago
- Just another version of the custom stack call from Proxy-Function-Calls-For-ETwTI☆35Updated 2 years ago
- Load Dll into Kernel space☆38Updated 3 years ago
- 关闭恶意驱动的文件和注册表保护☆13Updated 3 years ago
- PEBFake(修改PEB 伪装当前进程路径、参数等)☆51Updated 4 years ago
- POC of PPID spoofing using NtCreateUserProcess with syscalls to create a suspended process and performing process injection by overwritti…☆40Updated 3 years ago
- COM Explorer☆15Updated 6 months ago