astra-io

astra-io's Stars

• memN0ps/eagle-rs

  Rusty Rootkit - Windows Kernel Rookit in Rust (Codename: Eagle)

  Language:Rust53068

• armvirus/CosMapper

  Loads a signed kernel driver which allows you to map any driver to kernel mode without any traces of the signed / mapped driver.

  Language:C++26961

• IcEy-999/Drv_Hide_And_Camouflage

  Language:C250128

• zareprj/JAV-AV-Engine

  An av windows engine with file guard and compress file enumator

  Language:C1117

• DeviceObject/rk2017

  Language:C1315

• aci1337/test-driver

  Language:C++21

• huoji120/goodeye

  https://githacks.org/Shawick/goodeye.git

  Language:C++4424

• btbd/access

  Access without a real handle

  Language:C886222

• ContionMig/KernelMode-Bypass

  This is a source to a bypass i made for some games, for now this should work f or VAC, BE and EAC. The only downside is that you will need to find a exploit to load the driver

  Language:C18353

• aweMinchoo/anti_all_in_one

  尽量汇聚反调试资源和利用对抗技术

  1

• keystone-engine/keystone

  Keystone assembler framework: Core (Arm, Arm64, Hexagon, Mips, PowerPC, Sparc, SystemZ & X86) + bindings

  Language:C++2.3k456

• lem0nSec/KBlast

  Windows Kernel Offensive Toolset

  Language:C++11224

• yo-yo-yo-jbo/hotkeyz

  Hotkey-based keylogger for Windows

  Language:C71

• annihilatorq/shadow_syscall

  windows syscalls with a single line and a high level of abstraction. has modern cpp20 wrappers and utilities, range-based DLL and export enumeration, wrapper around kuser_shared_data. supported compilers: clang, gcc and msvc

  Language:C++13011

• 0x00Alchemist/PicoHook

  Small driver that uses alternative syscalls feature (the project is still under development).

  Language:C151

• fengjixuchui/gdrv-loader

  Kernel driver loader using vulnerable gigabyte driver (https://www.secureauth.com/labs/advisories/gigabyte-drivers-elevation-privilege-vulnerabilities) to load a unsigned driver

  Language:C216135

• iomeone/pwn3d_align

  Hooking Shadow and normal SSDT with Kaspersky Hypervisor and abusing alignment

  2323

• jthuraisamy/SysWhispers

  AV/EDR evasion via direct system calls.

  Language:Assembly1.8k264

• KameronHawk/Kernel-VAD-Injector

  Windows 10 DLL Injector via Driver utilizing VAD and hiding the loaded driver

  Language:C14735

• j00ru/windows-syscalls

  Windows System Call Tables (NT/2000/XP/2003/Vista/7/8/10/11)

  Language:HTML2.2k329

• Oxygen1a1/InfinityHook_latest

  etw hook (syscall/infinity hook) compatible with the latest Windows version of PG

  Language:C++20967

• ThomasonZhao/InfinityHookProMax

  InfinityHookProMax: Make InfinityHook great great again

  Language:C++4216

• hwzi/NGS-Emulator

  A full emulator bypass for NexonGameSecurity, written in 2015, last updated in 2016/17.

  Language:C++35

• nbs32k/inline-syscall

  Inline syscalls made for MSVC supporting x64 and WOW64

  Language:C++17230

• FiYHer/InfinityHookPro

  InfinityHookPro Win7 -> Win11 latest

  Language:C++492172

• zhuhuibeishadiao/Kernelmode-manual-mapping-through-IAT

  Manual mapping without creating any threads, with rw only access

  31

• zhuhuibeishadiao/hwid

  HWID spoofer

  21

• zhuhuibeishadiao/PG1903

  53

• zhuhuibeishadiao/Navy_public

  轻量级自动分析病毒程序调用上下文、游戏反调试实现技术平台

  11

• zhuhuibeishadiao/infhook19041

  1