0ffffffffh / system_call_hook_win10_1903
This is the P.O.C source for hooking the system calls on Windows 10 (1903) using it's dynamic trace feature weakness
☆51Updated 5 years ago
Alternatives and similar repositories for system_call_hook_win10_1903
Users that are interested in system_call_hook_win10_1903 are comparing it to the libraries listed below
Sorting:
- A poc that abuses Enclave☆38Updated 2 years ago
- Example of hijacking system calls via function pointer tables☆31Updated 3 years ago
- x64 Windows implementation of virtual-address to physical-address translation☆41Updated 3 years ago
- ☆68Updated 4 years ago
- Stealthy Injector that leverages a vulnerable driver and other exploits to remain undetected☆36Updated 6 years ago
- A library for intel VT-x hypervisor functionality supporting EPT shadowing.☆49Updated 4 years ago
- a simple intel vt code both support x86 & x64. PatchGuard monitor.☆75Updated 3 years ago
- Discarded Section Manual Map☆67Updated 4 years ago
- Handling C++ & __try exceptions without the need of built-in handlers.☆71Updated 3 years ago
- ☆34Updated 4 years ago
- Some garbage drivers written for getting started☆65Updated 5 years ago
- ☆24Updated 6 years ago
- Windows kernel drivers simple HTTP library for modern C++☆42Updated 6 years ago
- Windows PDB parser for kernel-mode environment.☆96Updated 2 years ago
- Custom KiSystemStartup, can be used to modificate kernel before boot.☆52Updated 3 years ago
- windows kernel pagehook☆39Updated 2 years ago
- ☆69Updated 2 years ago
- based on https://github.com/secrary/Hooking-via-InstrumentationCallback☆71Updated 5 years ago
- Mapping your code on a 0x1000 size page☆72Updated 2 years ago
- ☆97Updated 7 years ago
- Visual Studio Project example for using Microsoft's STL in WDM (Windows Kernel-mode Driver)☆25Updated 3 years ago
- Bypasses for Windows kernel callbacks PatchGuard protection☆43Updated 3 years ago
- direct systemcalls with a modern c++20 interface.☆42Updated 2 years ago
- detect hypervisor with Nmi Callback☆34Updated 2 years ago
- windows kernelmode driver to inject dll into each and every process and perform systemwide function hooking☆54Updated 2 years ago
- (DEPRECATED) A simple anti-anti debug library for Windows☆29Updated 4 years ago
- ☆26Updated 3 years ago
- Hiding a system thread against conventional means of detection☆40Updated 4 years ago
- ☆36Updated 4 years ago
- Windows Kernel nt files - To research windows kernel☆15Updated 4 years ago