ytk2128 / api-monitor32Links
A simple tool for detecting memory modifications to Windows API.
☆22Updated 4 months ago
Alternatives and similar repositories for api-monitor32
Users that are interested in api-monitor32 are comparing it to the libraries listed below
Sorting:
- ☆25Updated 2 years ago
- Yet another Windows DLL injector.☆39Updated 3 years ago
- ☆18Updated 4 years ago
- APC DLL Injector with NtQueueApcThread and wake up thread support☆45Updated 7 years ago
- Lightweight Portable Executable parsing library and a demo peParser application.☆80Updated 2 years ago
- A compact tool for detecting AV/EDR hooks in default Windows libraries.☆31Updated 3 years ago
- Library for using direct system calls☆35Updated 4 months ago
- Bypass UAC by abusing the Security Center CPL and hijacking a shell protocol handler☆29Updated 3 years ago
- Process Injection: APC Injection☆32Updated 4 years ago
- A ready-made template for a project based on libpeconv.☆48Updated 3 months ago
- Call 32bit NtDLL API directly from WoW64 Layer☆60Updated 4 years ago
- Add an empty section to a PE file☆51Updated 7 years ago
- ☆33Updated 3 years ago
- My try to implement a virtual CPU in C☆19Updated last year
- Helper Script to convert a Windbg dumped structure (using the 'dt' command) into a C structure. It creates dummy structs for you if neede…☆26Updated last year
- Hook all callbacks which are registered with LdrRegisterDllNotification☆87Updated 2 months ago
- Titan: A crappy Reflective Loader written in C and assembly for Cobalt Strike. Redirects DNS Beacon over DoH☆48Updated 3 years ago
- SetWinEventHook Sample☆47Updated last year
- A Practical example of ELAM (Early Launch Anti-Malware)☆33Updated 3 years ago
- ☆15Updated 4 years ago
- Process Hollowing Packer☆26Updated 7 years ago
- Dumps information about all the callback objects found in a dump file and the functions registered for them☆36Updated 4 years ago
- A kernel mode Windows rootkit in development.☆48Updated 3 years ago
- Open-source EDR kernel-component for system monitoring and DLL injection☆31Updated 4 years ago
- Clone running process with ZwCreateProcess☆57Updated 4 years ago
- Anti-Analysis technique, trick the debugger by Hiding events from it.☆19Updated 3 years ago
- Dynamically generated obfuscated jumps and/or function calls☆35Updated 2 years ago
- An example of how x64 kernel shellcode can dynamically find and use APIs☆106Updated 5 years ago
- the Open Source and Pure C++ Packer for eXecutables☆21Updated 2 years ago
- Six cases demonstrating methods of optimizing GetProcAddress☆17Updated 3 years ago