Hook system calls, context switches, page faults and more.

Hide your Powershell script in plain sight. Bypass all Powershell security features

makin - reveal anti-debugging and anti-VM tricks [This project is not maintained anymore]

Sample code for the Effective Modern C++ book by Scott Meyers.

A kernel driver to practice writing exploits against, as well as some example exploits using public techniques.

InfectPE - Inject custom code into PE file [This project is not maintained anymore]

Detecting execution of kernel memory where is not backed by any image file

C++/Java implementations of the Gang of Four's "Design Patterns: Elements of Reusable Object-Oriented Software"

IntelVT-X nice feature -> tool

A tool to help malware analysts tell that the sample is injecting code into other process.

Kernel-mode C++ unit testing framework in BDD-style

AllMemPro

Technion CS Ransomware Project: Writing Windows Mini-Filter Driver to protect PC from Ransomware

Configurable instrumentation of LLVM bitcode

Examples for detection of hidden processes on windows

This repository contains some tools that I have written in the past

WIP - Play with Intel VM Extensions

A simple tool to help you capture Ioctls.

WIP - Play with Intel VM Extensions