KNSoft.NDK provides native C/C++ definitions and import libraries for Windows NT and some specifications.
-
Updated
Feb 20, 2025 - C
#
ntapi
Here are 23 public repositories matching this topic...
Dump lsass using only NTAPI functions creating 3 JSON and 1 ZIP file... and generate the MiniDump file later!
-
Updated
Feb 6, 2025 - C#
Codes that could trigger BSOD (Blue Screen of Death) on Windows.
-
Updated
Jan 17, 2025 - C
Malleable shellcode loader written in C and Assembly utilizing direct or indirect syscalls for evading EDR hooks
windows dll msvc malware-development shellcode-loader native-api process-injection ntapi shellcode-injection payload-encryption edr-bypass edr-evasion maldev dll-sideloading api-hashing direct-syscalls indirect-syscalls iat-camouflage
-
Updated
Dec 22, 2024 - C
contains code for fakewer, dll sideloading poc / writeup
-
Updated
Dec 17, 2024 - C#
Dump lsass using only NTAPI functions by hand-crafting Minidump files (without MiniDumpWriteDump!!!)
-
Updated
Dec 17, 2024 - C#
Bypass Credential Guard by patching WDigest.dll using only NTAPI functions
-
Updated
Dec 10, 2024 - C#
Windows API (WinAPI) functions and system calls with categories in JSON format, including arguments (SAL notation) and more.
windows winapi syscalls windows-api system-calls native-api ntapi windows-syscalls windows-functions
-
Updated
Jul 11, 2024 - Python
Windows malware development C/C++ snippets.
-
Updated
Dec 22, 2023 - C
obfuscate WINAPI/NTAPI calls easily.
-
Updated
Oct 5, 2023 - Python
Go shellcode loader that combines multiple evasion techniques
golang pentesting syscalls evasion offensive-security av-evasion ntdll red-teaming adversary-emulation ntapi edr-evasion
-
Updated
Jun 21, 2023 - Go
A dedicated repository for exploring offensive kernel-mode techniques.
-
Updated
May 29, 2023 - C
[Deprecated, work in progress alternative: https://github.com/M2Team/NanaRun] Series of System Administration Tools
windows administration system launcher privileges session process token bypass trustedinstaller integritylevel nsudo ntapi devilmode accesscheck
-
Updated
Dec 7, 2022 - C++
Some random system tools for Windows
-
Updated
Apr 16, 2022 - Pascal
Improve this page
Add a description, image, and links to the ntapi topic page so that developers can more easily learn about it.
Add this topic to your repo
To associate your repository with the ntapi topic, visit your repo's landing page and select "manage topics."