0ffffffffh / system_call_hook_win10_1903
This is the P.O.C source for hooking the system calls on Windows 10 (1903) using it's dynamic trace feature weakness
☆51Updated 5 years ago
Alternatives and similar repositories for system_call_hook_win10_1903:
Users that are interested in system_call_hook_win10_1903 are comparing it to the libraries listed below
- Example of hijacking system calls via function pointer tables☆31Updated 3 years ago
- ☆34Updated 4 years ago
- A poc that abuses Enclave☆38Updated 2 years ago
- ☆68Updated 4 years ago
- (DEPRECATED) A simple anti-anti debug library for Windows☆29Updated 4 years ago
- A library for intel VT-x hypervisor functionality supporting EPT shadowing.☆49Updated 4 years ago
- a simple intel vt code both support x86 & x64. PatchGuard monitor.☆75Updated 3 years ago
- windows kernel pagehook☆39Updated 2 years ago
- x64 Windows implementation of virtual-address to physical-address translation☆40Updated 3 years ago
- Some garbage drivers written for getting started☆64Updated 5 years ago
- D☆43Updated 3 years ago
- ☆24Updated 6 years ago
- A Simple Example☆21Updated 6 years ago
- Helper script for Windows kernel debugging with IDA Pro on VMware + GDB stub (including PDB symbols)☆63Updated last year
- Discarded Section Manual Map☆67Updated 4 years ago
- Handling C++ & __try exceptions without the need of built-in handlers.☆70Updated 3 years ago
- Bypasses for Windows kernel callbacks PatchGuard protection☆43Updated 3 years ago
- detect hypervisor with Nmi Callback☆34Updated 2 years ago
- Global DLL injector☆66Updated 3 years ago
- ☆96Updated 7 years ago
- Windows kernel drivers simple HTTP library for modern C++☆42Updated 6 years ago
- x64 syscall caller in C++.☆89Updated 6 years ago
- Analyze PatchGuard☆58Updated 6 years ago
- A simple kernel mode driver that hooks some values at the KUSER_SHARED_DATA structure.☆26Updated 5 years ago
- ☆26Updated 3 years ago
- ☆35Updated 4 years ago
- ☆68Updated 2 years ago
- Resolve DOS MZ executable symbols at runtime☆95Updated 3 years ago
- ☆48Updated 6 years ago
- Stealthy Injector that leverages a vulnerable driver and other exploits to remain undetected☆36Updated 6 years ago