nelsonbighead Goto Github PK

window_hijack

Rendering on external windows via hijacking thread contexts

windows_x64_shellcode_template

An easily modifiable shellcode template for Windows x64 written in C

windowskernelprogrammingbook

The Windows Kernel Programming book samples

winioctldecoder

IDA Plugin which decodes Windows Device I/O control code into DeviceType, FunctionCode, AccessType and MethodType.

winkernel-resources

A list of excellent resources for anyone to deepen their understanding with regards to Windows Kernel Exploitation and general low level security.

woody_woodpacker

Packer for ELF x64 / PE (console)

wow64pp

A modern c++ implementation of windows heavens gate

wow64syscallhook

Wow64 syscall hook

wprotect

x64-syscall

x64 syscall caller in C++.

x64-virtualizer-rs

x86-64 virtualizing obfuscator written in Rust

x64-vm

x86-64 virtual machine and disassembler

x64dbg

An open-source x64/x32 debugger for windows.

x86-code-virtualizer

x86 Binary Code Virtualization Tool

x86-encoder

Explores the encoding of x86 machine instructions

x86-instruction-encoding-tutorial

x86 Instruction Encoding Tutorial

x86devirt

A project that aims to automatically devirtualize code that has been virtualized using x86virt

x86retspoof

Invoke functions with a spoofed return address. For 32-bit Windows binaries. Supports __fastcall, __thiscall, __stdcall and __cdecl calling conventions. Written in C++17.

xenos

Windows dll injector

xhunter1_privesc

(Ab)using the XIGNCODE3 driver to open a handle to any process.

xkelogger

Kernel mode windows NT API logger

xlogger

Simple windows API logger

xobf

Simple x86/x86_64 instruction level obfuscator based on a basic SBI engine

xorstr

heavily vectorized c++17 compile time string encryption.

xorstr-1

yubina-ddos-greensyn-source

Yubina-greensyn

yumekage

Demo proof of concept for shadow regions, and implementation of HyperDeceit.

z0fcourse_reverseengineering

Reverse engineering focusing on x64 Windows.

zemanalpe

A proof-of-concept of local privilege escalation by exploiting Zemana AntiMalware/AntiLogger

zeroaccess

ZeroAccess v3 toolkit