• Stars
    star
    9
  • Rank 1,939,727 (Top 39 %)
  • Language
    C++
  • License
    MIT License
  • Created almost 5 years ago
  • Updated almost 5 years ago

Reviews

There are no reviews yet. Be the first to send feedback to the community and the maintainers!

Repository Details

Record the modifications that software arbitrarily makes to other processes code and data sections, then generate code "macros" reflecting those changes.

More Repositories

1

RVDbg

RVDbg is a debugger/exception handler for Windows processes and has the capability to circumvent anti-debugging techniques. (Cleaner, documented code base being worked on in: core branch)
C++
71
star
2

RudiAC

A client-sided anti-cheat developed during a freelance project to "plug-in" to a proprietary client for a private server. Includes memory integrity checks, thread execution restrictions, hook detection, memory honeypots, and more.
C++
55
star
3

vmemory

Cross-platform library for reading/writing memory in other processes for Rust
Rust
52
star
4

Remote-Thread-Executor

Code injection by hijacking threads in Windows 32-bit applications
C++
42
star
5

KeProcessOverlay

Reading/writing memory from kernel-mode
C
21
star
6

UTKModule

Modifies the code of the RtlUserThreadStart callback and reads the arguments passed to it. Then it changes the initial execution argument for the thread to a different location, but with the same executable memory. Bypasses some generic memory integrity checks.
C
13
star
7

Python-Object-Explorer

Allows the inspection of how Python objects are mapped in the memory of a foreign Python runtime, it can intercept processes that are interpreted or are executing native code via static compilation by projects like Nuitka
C++
7
star
8

APIHook-Library

Library for using API hooks to change the control flow of subroutine(s) and use plain-text for lookup-based hooks.
C++
5
star
9

authzsec-mod-um

This is a project serving as a supplementary security module as a user-mode interface to a kernel-mode service using Windows ACLs and (TBA) AppContainer technology and other forms of object isolation.
C++
5
star
10

WPSet

This source sets the cr0 register (control register) then changes the write protection bit and disables it temporarily.
C
3
star