x64dbg / lz4
☆13Updated 3 months ago
Alternatives and similar repositories for lz4:
Users that are interested in lz4 are comparing it to the libraries listed below
- Example of building an application verifer DLL☆46Updated 10 months ago
- Dll injection through code page id modification in registry. Based on jonas lykk research☆17Updated 2 years ago
- Safely manage the unloading of DLLs that have been hooked into a process. Context: https://github.com/KNSoft/KNSoft.SlimDetours/discussio…☆56Updated this week
- Finding Truth in the Shadows☆89Updated 2 years ago
- a demo module for the kaine agent to execute and inject assembly modules☆38Updated 7 months ago
- Remote Thread Detection with a Kernel Driver☆30Updated 3 months ago
- Exploiting the KsecDD Windows driver through Server Silos☆65Updated 5 months ago
- An improved version of Patch Guard that I implemented, that includes integrity checks and other protection mechanisms I added.☆59Updated 3 weeks ago
- A runtime for developing large-scale and complex shellcode.☆19Updated last week
- Mentally ill EtwTi parser☆36Updated 3 weeks ago
- ☆38Updated 2 months ago
- Next gen process injection technique☆52Updated 4 years ago
- Walks the CFG bitmap to find previously executable but currently hidden shellcode regions☆114Updated last year
- Demo from the Malware Analysis and Development Webinar☆20Updated last year
- In-memory hiding technique☆48Updated 3 months ago
- Boilerplate to develop raw and truly Position Independent Code (PIC).☆45Updated 2 months ago
- Uses Threat-Intelligence ETW events to identify shellcode regions being hidden by fluctuating memory protections☆125Updated last year
- Callstack spoofing using a VEH because VEH all the things.☆20Updated last month
- ☆86Updated 7 months ago
- ☆27Updated 4 months ago
- Shellcode Loader Utilizing ETW Events☆62Updated last month
- A PoC for adding NtContinue to CFG allowed list in order to make Ekko work in a CFG protected process☆99Updated 2 years ago
- ☆84Updated 10 months ago
- ForsHops☆41Updated 3 weeks ago
- stack spoofing☆83Updated 5 months ago
- Detours implementation (x64/x86) which used only ntdll import☆90Updated 10 months ago
- Minifilter Callback Patching Proof-of-Concept☆67Updated 2 years ago
- Reimplementation of the KExecDD DSE bypass technique.☆47Updated 7 months ago
- early cascade injection PoC based on Outflanks blog post, in rust☆57Updated 5 months ago
- ☆107Updated 2 years ago