
wstrace
Standalone zero-driver Windows system and API monitor in Rust

Standalone zero-driver Windows system and API monitor in Rust

Windows kernel driver that hooks Nt* SSDT functions to hide debuggers and processes from anti-debug checks, with an x64dbg plugin for stealth…

Basic injectable for analyzing the behavior of evasive malware

Debugger utilizing stealth hooks to hide from debugger detection

Hardware Breakpoint (DR0-DR7) based patch-less user-mode hooking & telemetry instrumentation engine (AMSI, WLDP & ETW PoC).

Obfuscates x86-64 assembly with instruction injection, junk code, constant obfuscation, and runtime decryption to hinder reverse engineering and…

VMP improved idea (old AmogusPlugin)

POC about how to detect windows kernel debug by pool tag.


Debugging toolbar for Rack applications implemented as middleware

AntiSpy is a free but powerful anti virus and rootkits toolkit.It offers you the ability with the highest privileges that can detect,analyze and…