wecooperate / iSwordSDKLinks
iSwordSDK (Provide Powerful Kernel API For Ring3 Applications)
☆15Updated 3 years ago
Alternatives and similar repositories for iSwordSDK
Users that are interested in iSwordSDK are comparing it to the libraries listed below
Sorting:
- Hide Port In Windows☆42Updated last year
- Convert native dll to shellcode, and support exported function☆25Updated 4 years ago
- 横向移动三剑客 ( Lateral movement tools)☆30Updated 4 years ago
- 从admin冲到TrustedInstaller☆17Updated 2 years ago
- Open-source EDR kernel-component for system monitoring and DLL injection☆32Updated 5 years ago
- shadow tls☆17Updated 3 years ago
- This is a random process injector, and more injection techniques will be added in the future.☆13Updated 5 years ago
- 关闭恶意驱动的文件和注册表保护☆14Updated 3 years ago
- ☆32Updated 5 years ago
- Demo to show how write ALPC Client & Server using native Ntdll.dll syscalls.☆21Updated 3 years ago
- Windows Kernel Knowledge && Collect Resources on the wire && Nothing innovation by myself &&☆61Updated this week
- Windows CVE主防(HIPS/HIDS)☆56Updated 4 years ago
- RPC Monitor based on The ETW Microsoft-Windows-Rpc provider☆23Updated 5 years ago
- A kernel mode Windows rootkit in development.☆49Updated 3 years ago
- ☆40Updated 3 years ago
- https://key08.com/index.php/2021/10/19/1375.html☆71Updated 3 years ago
- Just another version of the custom stack call from Proxy-Function-Calls-For-ETwTI☆34Updated 2 years ago
- 编译时混淆字符串,以确保生成的二进制PE不会暴漏明文字符串。(C++ 14 及以上)☆29Updated 4 years ago
- 32 bit process inject shellcode to 32 bit process and 64 bit process☆35Updated 2 years ago
- Kill Protected Process Light Process (include av)☆58Updated 2 years ago
- Load Dll into Kernel space☆38Updated 3 years ago
- ☆33Updated 2 years ago
- 针对windows rootkit的一些检测,分别从进程、端口、文件这三个方面进行检测。☆20Updated 11 months ago
- C++ implementation of DOUBLEPULSAR usermode shellcode. Yet another Reflective DLL loader.☆31Updated 4 years ago
- Windows Sandbox Framework☆40Updated 3 years ago
- Process Hollowing Packer☆30Updated 8 years ago
- impersonate trustedinstaller by fiddling with tokens☆17Updated 4 years ago
- POC of PPID spoofing using NtCreateUserProcess with syscalls to create a suspended process and performing process injection by overwritti…☆40Updated 4 years ago
- 参考taviso的代码逆向一下mpengine.dll☆20Updated 3 years ago
- SyscallLoader☆11Updated 4 years ago