Loaderine
A demo that loads and runs a code using detached NTDLL (in order to evade userland hooks monitoring activity).
WARNING: Experimental version.
- uses library:
https://github.com/hasherezade/libpeconv.git
hasherezade / loaderine
Licence: other
A demo implementation of a well-known technique used by some malware to evade userland hooking, using my library: libpeconv.
Stars: ✭ 19
Programming Languages
Labels
Projects that are alternatives of or similar to loaderine
Pe Sieve
Scans a given process. Recognizes and dumps a variety of potentially malicious implants (replaced/injected PEs, shellcodes, hooks, in-memory patches).
Stars: ✭ 1,783 (+9284.21%)
Mutual labels: libpeconv
libpeconv tpl
A ready-made template for a project based on libpeconv.
Stars: ✭ 28 (+47.37%)
Mutual labels: libpeconv
Note that the project description data, including the texts, logos, images, and/or trademarks,
for each open source project belongs to its rightful owner.
If you wish to add or remove any projects, please contact us at [email protected].