johnsonjason/Remote-Thread-Executor

Stars
42
Rank 656,625 (Top 13 %)
Language
C++
License
MIT License
Created about 7 years ago
Updated about 6 years ago

johnsonjason/Remote-Thread-Executor

johnsonjason

There are no reviews yet. Be the first to send feedback to the community and the maintainers!

Code injection by hijacking threads in Windows 32-bit applications

RVDbg

RVDbg is a debugger/exception handler for Windows processes and has the capability to circumvent anti-debugging techniques. (Cleaner, documented code base being worked on in: core branch)

RudiAC

A client-sided anti-cheat developed during a freelance project to "plug-in" to a proprietary client for a private server. Includes memory integrity checks, thread execution restrictions, hook detection, memory honeypots, and more.

vmemory

Cross-platform library for reading/writing memory in other processes for Rust

KeProcessOverlay

Reading/writing memory from kernel-mode

UTKModule

Modifies the code of the RtlUserThreadStart callback and reads the arguments passed to it. Then it changes the initial execution argument for the thread to a different location, but with the same executable memory. Bypasses some generic memory integrity checks.

MemDiff

Record the modifications that software arbitrarily makes to other processes code and data sections, then generate code "macros" reflecting those changes.

Python-Object-Explorer

Allows the inspection of how Python objects are mapped in the memory of a foreign Python runtime, it can intercept processes that are interpreted or are executing native code via static compilation by projects like Nuitka

APIHook-Library

Library for using API hooks to change the control flow of subroutine(s) and use plain-text for lookup-based hooks.

authzsec-mod-um

This is a project serving as a supplementary security module as a user-mode interface to a kernel-mode service using Windows ACLs and (TBA) AppContainer technology and other forms of object isolation.

WPSet

This source sets the cr0 register (control register) then changes the write protection bit and disables it temporarily.