POC of a better implementation of GetProcAddress for ntdll using binary search
-
Updated
Apr 8, 2024 - C
POC of a better implementation of GetProcAddress for ntdll using binary search
Tiny C header that allows easy hiding of WinAPI imports via PEB
PoC shellcode injector using clean syscalls to bypass user-mode hooks in ntdll.dll
Custom implementations of WinAPI functions GetProcAddress and GetModuleHandle by traversing low level Windows data structures.
🛠️ Enhance your application's stealth by resolving WinAPI calls through PEB walking, keeping your import table clean and hidden from scrutiny.
Add a description, image, and links to the peb topic page so that developers can more easily learn about it.
To associate your repository with the peb topic, visit your repo's landing page and select "manage topics."