Signal Labs

Popular repositories Loading

Example code for EDR bypassing

C++ 151 32
(First Public?) Sample of unhooking ntdll (All Exports & IAT imports) hooks in Rust using in-memory disassembly, avoiding direct syscalls and all hooked functions (incl. hooked NtProtectVirtualMemory)

Rust 138 19

Showing 9 of 9 repositories

iat_unhook_sample Public
(First Public?) Sample of unhooking ntdll (All Exports & IAT imports) hooks in Rust using in-memory disassembly, avoiding direct syscalls and all hooked functions (incl. hooked NtProtectVirtualMemory)

Signal-Labs/iat_unhook_sample’s past year of commit activity

Rust
138
GPL-3.0
19 0 0
Updated Mar 3, 2025
Signal-Labs/IOCTLDump’s past year of commit activity
Signal-Labs/Hotpatching_PoC’s past year of commit activity

Rust
23
GPL-3.0
6 0 0
Updated Mar 6, 2023
Signal-Labs/binaryninja-api’s past year of commit activity

C++
2
MIT
286 0 0
Updated Feb 3, 2023
Signal-Labs/VmwareBlogBug’s past year of commit activity

2
0
0 0
Updated Sep 30, 2022
Signal-Labs/BasicWXAMFuzzer’s past year of commit activity

C++
44 8 0 0
Updated Aug 8, 2022
Signal-Labs/FileHook’s past year of commit activity

C++
30
MIT
10 0 0
Updated Oct 13, 2020
FoxitFuzz9.7 Public
Fuzzing Harness for FoxitReader 9.7 ConvertToPDF Function

Signal-Labs/FoxitFuzz9.7’s past year of commit activity

C++
14 8 0 0
Updated Feb 29, 2020
Signal-Labs/NtdllUnpatcher’s past year of commit activity

This organization has no public members. You must be a member to see who’s a part of this organization.

Loading…