Microwave89

rtsectiontest. An Attempt to Bypass Memory Scanners By Misusing the ntdll.dll "RT" Section.

createuserprocess. Three Tiny Examples of Directly Using Vista's NtCreateUserProcess

syscalltest. PoC for Bypassing UM Hooks By Bruteforcing Intel Syscalls

drvtricks. drvtriks kernel driver for Windows 7 SP1 and 8.1 x64, that tricks around in your system.

win7-x64-ndk. Native Development Kit for Vista 64bit And Later, by me, Based on NDK Headers 1.0, by Alex Ionescu

injector. Code Injector Using Code Caves

injector2. Code Injector Using RT Code Cave

ntapihook. Attempt to Create a Simple and Light-weight Hook Engine Without Use of an LDE

regbackup64. Registry Backup Tool Which Addresses the Shortcomings of "ERUNT"

openprocbyname. Opening a Process By Its Name for Virtual Memory Access

defcreator. Pre-test of creating .def files by parsing the EAT of an x64 DLL (finished)

shellcodemsg. Displaying a "hard error" messagebox without relying on any library

asmtest. Example for Writing Proper AMD64 Assembly Code for Windows

kbdfnflt2. Filter Driver for Adding Functions to Keyboard

DrvHide-PoC. Hidden kernel mode code execution for bypassing modern anti-rootkits.

falstad_circuits. Random power electronics circuit files for Falstad simulator