0mWindyBug / FileHide
filter driver to hide files and directories
☆17Updated 11 months ago
Alternatives and similar repositories for FileHide:
Users that are interested in FileHide are comparing it to the libraries listed below
- a windows kernel keylogger that works☆21Updated 11 months ago
- a driver to enumerate registered pnp callbacks for a particular interface class based on reversal of IoRegisterPlugPlayNotification☆11Updated 10 months ago
- silence file system monitoring components by hooking their minifilters☆55Updated 11 months ago
- A packed & protected Module Loader and more, for 64-bit Windows☆28Updated 3 years ago
- A class to gather information about a process, its threads and modules.☆24Updated 4 years ago
- A native Windows library for intercepting kernel-to-user transitions using instrumentation callbacks☆16Updated 11 months ago
- ☆8Updated 2 months ago
- XOrCryptEx lightweight C Utility/Algorithm☆11Updated 2 years ago
- Manually Mapped Windows Kernel Driver + Usermode API for Arbitrary R/W to UM process via a UM thread trapped in kernel, synchronized with…☆14Updated 4 years ago
- Hijack NotifyRoutine for a kernelmode thread☆41Updated 2 years ago
- x64 Windows privilege elevation using anycall☆20Updated 3 years ago
- handle elevation using bedaisy.☆12Updated 4 years ago
- Load Dll into Kernel space☆38Updated 2 years ago
- EDR PoC WIP LLC☆10Updated 11 months ago
- Using c++23 compile-time magic to produce obfuscated PIC strings and arrays.☆16Updated 7 months ago
- Windows driver template, using C++20 & cmake & GithubActions☆20Updated 5 months ago
- stop any process from looking into your process by hooking.☆16Updated 9 months ago
- Static Library For Windows Drivers☆33Updated last month
- Proof-of-concept game using VBS enclaves to protect itself from cheating☆28Updated 2 months ago
- A C++ syscall ID extractor for Windows. Developed, debugged and tested on 20H2.☆20Updated 3 years ago
- Process hiding library☆19Updated 4 years ago
- Allows for same-file KernelMode function execution using Encrypted addresses of Functions☆28Updated 2 months ago
- Driver that communicates using a thread and a shared section with Usermode☆30Updated 3 months ago
- ☆14Updated 4 years ago
- This is a POC Test project for INTEL CPUs on blocking NMI Entries through the IDT Handler.☆29Updated 3 months ago
- Rookit and anti rookit on Windows platform☆13Updated 8 months ago
- Reverse Socks5 proxy for windows☆13Updated 2 years ago
- Single header library to simplify the usage of direct syscalls. x64/x86☆12Updated last year
- Experiment to use sections as User/Kernelmode comm vector☆21Updated last year