
moonwalk
find dll base addresses without PEB WALK
binary-analysiseducationpayload-development+2

find dll base addresses without PEB WALK

Inception is a physical memory manipulation and hacking tool exploiting PCI-based DMA. The tool can attack over FireWire, Thunderbolt, ExpressCard,…

The swiss army knife of LSASS dumping

Hide memory artifacts using ROP and hardware breakpoints.

Stealthier variation of Module Stomping and Module Overloading injection techniques that reduces memory IoCs. Implemented in Python ctypes

EDRSandblast-GodFault

DLLirant is a tool to automatize the DLL Hijacking researches on a specified binary.