1 مستودع
Modifying or erasing process image headers in memory to prevent forensic dumping.
Distinct from Runtime Memory Manipulation: Distinct from Runtime Memory Manipulation: specifically targets image headers to prevent usable process dumps.
Explore 1 awesome GitHub repository matching security & cryptography · Memory Header Manipulation. Refine with filters or upvote what's useful.
Al-Khaser is a research project focused on the development of anti-analysis and evasion techniques to resist reverse engineering. It provides implementations for detecting and evading virtual machines, sandboxes, and debuggers to prevent software analysis. The project implements control flow obfuscation through anti-disassembly methods and utilizes dynamic API resolution to bypass static import tables. It further hinders forensic analysis by manipulating memory headers to prevent process dumps and utilizing remote code injection to execute logic in external processes. The capability surface
Modifies image sizes and erases headers in memory to prevent the creation of usable process dumps.