xf555er / Session0_InjectLinks
Session0注入: 用于实现对系统进程的远程线程注入
☆14Updated 2 years ago
Alternatives and similar repositories for Session0_Inject
Users that are interested in Session0_Inject are comparing it to the libraries listed below
Sorting:
- Hook NtDeviceIoControlFile with PatchGuard☆108Updated 3 years ago
- https://key08.com/index.php/2021/10/19/1375.html☆71Updated 3 years ago
- 利用物理内存映射,实现虚拟内存的伪隐藏☆84Updated 2 years ago
- 保护进程☆23Updated 2 years ago
- https://www.huorong.cn/☆14Updated last year
- 编译时混淆字符串,以确保生成的二进制PE不会暴漏明文字符串。(C++ 14 及以上)☆27Updated 3 years ago
- ☆21Updated 3 years ago
- ☆27Updated 2 years ago
- shadow tls☆17Updated 2 years ago
- Enum and Remove Hook in Windows☆38Updated this week
- ☆53Updated 2 years ago
- Call NtCreateUserProcess directly as normal.☆74Updated 3 years ago
- neat way to detect memory read using nt layer function.☆14Updated 2 years ago
- Rookit and anti rookit on Windows platform☆13Updated last year
- 对debughelp的二次开发☆11Updated 2 years ago
- 无痕注入1☆12Updated 4 years ago
- Load Dll into Kernel space☆38Updated 3 years ago
- Free(or force?)file and delete it☆12Updated 6 years ago
- UnknownField is a tool based clang that obfuscating the order of fields to protect your C/C++ game or code.☆45Updated 2 years ago
- A simple program to obfuscate code written in cpp.☆51Updated last year
- ☆23Updated 2 years ago
- bootkit驱动映射,三环进程注入加载指定模块☆14Updated 11 months ago
- IAT-Obfuscation to make static analysis of executable harder.☆44Updated 4 years ago
- abusing signed pdfwkrnl.sys for kernel function calling from usermode.☆20Updated 3 weeks ago
- Walks through the 4-level paging structures in Windows x64☆13Updated 2 years ago
- Executes Read/Write process memory with `NtQueryCompositionSurfaceStatistics`☆18Updated last year
- Windows kernel drivers simple HTTP library for modern C++☆42Updated 7 years ago
- A simple python script to check evil Visual Studio projects☆20Updated last year
- 一个windows内核驱动分析框架,对内核所有导出函数进行挂钩监控☆61Updated last month
- ☆27Updated last year