MaorSabag / Paruns-Fart Public

Notifications You must be signed in to change notification settings
Fork 8
Star 71

Just another ntdll unhooking using Parun's Fart technique

71 stars 8 forks Branches Tags Activity

Notifications

Name		Name	Last commit message	Last commit date
Latest commit History 7 Commits
.gitignore		.gitignore
LICENSE		LICENSE
Makefile		Makefile
README.md		README.md
addresshunter.h		addresshunter.h
adjuststack.asm		adjuststack.asm
fstring.py		fstring.py
functions.h		functions.h
template.cpp		template.cpp
unhooking.png		unhooking.png
wstring.py		wstring.py

Repository files navigation

Paruns-Fart

Just another ntdll unhooking using Parun's Fart technique

Usage:

make sure you have mingw cross-compiler and nasm installed on your linux

POC+Antiscan 14/02/2023:

Credits:

paranoidninja's Executing Position Independent Shellcode from Object Files in Memory

About

Just another ntdll unhooking using Parun's Fart technique

Report repository

Releases

No releases published

Packages

No packages published

Languages