0ffffffffh / system_call_hook_win10_1903
This is the P.O.C source for hooking the system calls on Windows 10 (1903) using it's dynamic trace feature weakness
☆51Updated 5 years ago
Alternatives and similar repositories for system_call_hook_win10_1903:
Users that are interested in system_call_hook_win10_1903 are comparing it to the libraries listed below
- ☆67Updated 4 years ago
- Example of hijacking system calls via function pointer tables☆32Updated 3 years ago
- x64 Windows implementation of virtual-address to physical-address translation☆41Updated 3 years ago
- (DEPRECATED) A simple anti-anti debug library for Windows☆29Updated 4 years ago
- A poc that abuses Enclave☆36Updated 2 years ago
- A library for intel VT-x hypervisor functionality supporting EPT shadowing.☆48Updated 3 years ago
- Handling C++ & __try exceptions without the need of built-in handlers.☆68Updated 3 years ago
- Some garbage drivers written for getting started☆64Updated 5 years ago
- a simple intel vt code both support x86 & x64. PatchGuard monitor.☆75Updated 3 years ago
- Discarded Section Manual Map☆67Updated 4 years ago
- Stealthy Injector that leverages a vulnerable driver and other exploits to remain undetected☆36Updated 6 years ago
- based on https://github.com/secrary/Hooking-via-InstrumentationCallback☆68Updated 5 years ago
- ☆24Updated 5 years ago
- A reflexive driver loader to bypass Windows DSE (featuring a custom PE loader)☆39Updated 6 years ago
- x64 syscall caller in C++.☆85Updated 6 years ago
- Analysing and defeating PatchGuard universally☆34Updated 4 years ago
- Manual PE image mapper☆62Updated 11 years ago
- Windows Kernel nt files - To research windows kernel☆15Updated 4 years ago
- detect hypervisor with Nmi Callback☆34Updated 2 years ago
- realExtern.sys driver☆65Updated 4 years ago
- Global DLL injector☆66Updated 3 years ago
- ☆26Updated 3 years ago
- Helper script for Windows kernel debugging with IDA Pro on VMware + GDB stub (including PDB symbols)☆62Updated last year
- NT reversal☆26Updated 6 years ago
- ☆34Updated 4 years ago
- ☆34Updated 4 years ago
- ☆93Updated 7 years ago
- POC Hook of nt!HvcallCodeVa☆50Updated last year
- Windows PDB parser for kernel-mode environment.☆93Updated 2 years ago