rbmm

SC_DEMO. C

NtDetours. Detours implementation (x64/x86) which used only ntdll import

LdrpKernel32DllName. C

SC. shell code example

INJECT. D

RtlClone. C

Hollowed-Process. Assembly

ARL. C++

TPM. Easy encrypt/decrypt data with TPM

ShadowAdmin. C

SDD. Self Delete DLL

TL-TASK. C

Services. C++

partial. d

SDD2. Self delete DLL (2)

DisableSvc. C++

asterisk.

DirectSysCall. C++

Noname. really ?

remap. break link between dll and it file on disk

MISC. Assembly

PPL. run process as PPL Antimalware

PfxViewer. C++

Load.

GetPdb. C++

LIB. C

pdbutil. C++

KPDB. C++

TBAL. C++

SearchEx. D00

CrackMe. d00

run-as-pro. C++

IConnectedUser. C++

ExportPolicy. Export not exported private key

NtRegView. C++

MutationGate. C++

KnownDlls. re-implementation

CriticalSectionTimeout. C

SRW_ALT. C++

CTF. Capture the Flag

dddi. C++

LongPath. C++

Proxy. C++

RDM. Module load event for unknown process

Handles. C++

TOTP. TOTP Authenticator for windows desktop

AsyncDelete. C++

EMITVOLATILEMETADATA. C

SRW-2. shared to exclusive

FwReady. WNF_WFAS_FIREWALL_NETWORK_CHANGE_READY

LdrpDebugFlags. C++

TVI. C++

LockFile-Poc. D

uac-2. C

WdfFunctions. C

MachineToken. C++

RbCopy. C

VSC.

KEYBOARD_LL. C