ntuserx Goto Github PK

al-khaser

Public malware techniques used in the wild: Virtual Machine, Emulation, Debuggers, Sandbox detection.

anti-debugging

Anti-debugging techniques on a (bad looking) Win32 application.

blackbone

#2 Windows memory hacking library

d2es-stuff

#1 Diablo 2 Eastern Sun modifications //D2Hackit/Core/MapDll.cpp

gdrv-loader-updated

gh-injector-gui

guidedhacking-injector

Fully Featured DLL Injector made by Broihon

memorydll-dllredirect

Dll memory redirection through Hook NtMapViewOfSection

parallelsyscalls

pe

A :zap: lightweight Go package to parse, analyze and extract metadata from Portable Executable (PE) binaries. Designed for malware analysis tasks and robust against PE malformations.

process-hollowing

process hollowing variant using NtCreateSection + NtMapViewOfSection + ResumeThread

reflexxion

RefleXXion is a utility designed to aid in bypassing user-mode hooks utilised by AV/EPP/EDR etc. In order to bypass the user-mode hooks, it first collects the syscall numbers of the NtOpenFile, NtCreateSection, NtOpenSection and NtMapViewOfSection found in the LdrpThunkSignature array.

simple-manual-map-injector

#3 Simple C++ DLL Manual Map Injector For x86 and x64

themidie

x64dbg plugin to bypass Themida 3.x Anti-Debugger / VM / Monitoring programs checks (x64)

windivs

An open source operating system, aimed at being an alternative to Linux/older Windows releases.

windows-exploitation

My notes while studying Windows exploitation