zodiacon / NativePowers
Native Powers Talk demos
☆14Updated last year
Alternatives and similar repositories for NativePowers:
Users that are interested in NativePowers are comparing it to the libraries listed below
- havoc kaine plugin to mitigate PAGE_GUARD protected image headers using JOP gadgets☆26Updated 7 months ago
- A few examples of how to trap virtual memory access on Windows.☆28Updated 3 months ago
- call gates as stable comunication channel for NT x86 and Linux x86_64☆31Updated last year
- ☆29Updated last year
- Easy encrypt/decrypt data with TPM☆25Updated last year
- Enabled / Disable LSA Protection via BYOVD☆66Updated 3 years ago
- In-memory hiding technique☆47Updated 2 months ago
- Example of building an application verifer DLL☆45Updated 9 months ago
- Reimplementation of the KExecDD DSE bypass technique.☆46Updated 6 months ago
- Your NTDLL vaccine from modern direct syscall methods.☆35Updated 2 years ago
- Exploiting the KsecDD Windows driver through Server Silos☆50Updated 4 months ago
- A class to emulate the behavior of NtQuerySystemInformation when passed the SystemHypervisorDetailInformation information class☆26Updated last year
- API Hammering with C++20☆45Updated 2 years ago
- Windows AppLocker Driver (appid.sys) LPE☆53Updated 7 months ago
- Callstack spoofing using a VEH because VEH all the things.☆17Updated last week
- https://github.com/janoglezcampos/c_syscalls with the ASM rewritten by myself for Visual Studio's Compiler.☆30Updated 9 months ago
- AIDA64DRIVER Elevation of Privilege Vulnerability☆12Updated 5 months ago
- ☆29Updated 3 weeks ago
- A VMWare logger using built-in backdoor.☆27Updated 5 months ago
- Windows 10 DLL Injector via Driver utilizing VAD and hiding the loaded driver☆50Updated last year
- ☆29Updated 3 months ago
- Mentally ill EtwTi parser☆35Updated last week
- Standalone Metasploit-like XOR encoder for shellcode☆47Updated 10 months ago
- Herpaderply Hollowing - a PE injection technique, hybrid between Process Hollowing and Process Herpaderping☆53Updated 2 years ago
- PoC for the Untrusted Pointer Dereference in the appid.sys driver☆16Updated 11 months ago
- Listing UDP connections with remote address without sniffing.☆30Updated last year
- using the gpu to hide your payload☆56Updated 2 years ago
- A fast method to intercept syscalls from any user-mode process using InstrumentationCallback and detect any process using Instrumentation…☆26Updated last year
- ☆25Updated 2 years ago
- yet another sleep encryption thing. also used the default github repo name for this one.☆70Updated last year