zodiacon / NativePowersLinks
Native Powers Talk demos
☆15Updated last week
Alternatives and similar repositories for NativePowers
Users that are interested in NativePowers are comparing it to the libraries listed below
Sorting:
- A cross-platform C++ framework for building Windows shellcode☆81Updated this week
- Demo from the Malware Analysis and Development Webinar☆23Updated last year
- Safely manage the unloading of DLLs that have been hooked into a process. Context: https://github.com/KNSoft/KNSoft.SlimDetours/discussio…☆81Updated 7 months ago
- Easy encrypt/decrypt data with TPM☆25Updated last year
- Implementation of an export address table protection mitigation, like Export Address Filtering (EAF)☆115Updated 2 years ago
- havoc kaine plugin to mitigate PAGE_GUARD protected image headers using JOP gadgets☆42Updated last year
- ☆118Updated 3 years ago
- Reimplementation of the KExecDD DSE bypass technique.☆57Updated last year
- Hooking KPRCB IdlePreselect function to gain execution inside PID 0.☆73Updated 9 months ago
- A few examples of how to trap virtual memory access on Windows.☆39Updated last year
- Exploiting the KsecDD Windows driver through Server Silos☆74Updated last year
- Piece of code to detect and remove hooks in IAT☆65Updated 3 years ago
- ☆60Updated 3 months ago
- A class to emulate the behavior of NtQuerySystemInformation when passed the SystemHypervisorDetailInformation information class☆27Updated 2 years ago
- Finding Truth in the Shadows☆120Updated 3 years ago
- An example of how to use Microsoft Windows Warbird technology☆91Updated 2 years ago
- ☆35Updated 2 years ago
- ☆90Updated last year
- Callstack spoofing using a VEH because VEH all the things.☆23Updated 10 months ago
- Slaying multi-language LLVM IR with obfuscation passes to achieve JIT execution☆130Updated last month
- WinDbg plugin to trace module transitions from a debugged driver.☆40Updated last month
- Detours implementation (x64/x86) which used only ntdll import☆90Updated 3 months ago
- Proof-of-concept kernel driver that hijacks the Windows kernel extension table mechanism to preserve process notify callbacks even when a…☆92Updated 7 months ago
- In-memory hiding technique☆63Updated last year
- https://github.com/janoglezcampos/c_syscalls with the ASM rewritten by myself for Visual Studio's Compiler.☆33Updated last year
- ☆72Updated 2 years ago
- Enabled / Disable LSA Protection via BYOVD☆81Updated 4 years ago
- ☆52Updated 10 months ago
- Win32 keylogger that supports all (non-ime using) languages correctly☆53Updated 2 years ago
- Windows AppLocker Driver (appid.sys) LPE☆73Updated last year