
moonwalk
find dll base addresses without PEB WALK
binary-analysiseducationpayload-development+2

find dll base addresses without PEB WALK

DLLirant is a tool to automatize the DLL Hijacking researches on a specified binary.

Hide memory artifacts using ROP and hardware breakpoints.

Inception is a physical memory manipulation and hacking tool exploiting PCI-based DMA. The tool can attack over FireWire, Thunderbolt, ExpressCard,…

Stealthier variation of Module Stomping and Module Overloading injection techniques that reduces memory IoCs. Implemented in Python ctypes

The swiss army knife of LSASS dumping

EDRSandblast-GodFault