Tools
TangledWinExec
daem0nc0re/TangledWinExec
A collection of PoCs and diagnostic tools for researching Windows process execution and injection techniques like hollowing and PPID spoofing.
Topics
Related projects
x64dbg50.3kAn open-source user-mode debugger for Windows built for reverse engineering and malware analysis, offering disassembly, memory inspection, scripting and a rich plugin system for hands-on binary debugging.
retoolkit5.3kretoolkit is an installer that bundles a curated set of reverse engineering and malware analysis tools for Windows. It preconfigures utilities like x64dbg to speed up setting up an analysis VM.
sogen3.9kSogen is a userspace Windows and Linux emulator that runs real system DLLs at CPU and syscall level, with deterministic execution, debugging, hooking and snapshots.
Nidhogg2.6kNidhogg is a Windows kernel rootkit for security research and red-team operations. It demonstrates process, file and registry hiding, privilege elevation, injection, credential dumping and kernel callback manipulation.
Reloaded-II1.1kA universal C# mod loader and mod management framework that uses DLL injection to add and manage mods for any native x86 or x64 game.
PrivFu1kA kernel-mode WinDbg extension and proof-of-concept collection for investigating Windows token privileges and privilege-escalation techniques.