0mWindyBug / FileHide
filter driver to hide files and directories
☆18Updated last year
Alternatives and similar repositories for FileHide:
Users that are interested in FileHide are comparing it to the libraries listed below
- a windows kernel keylogger that works☆21Updated last year
- a driver to enumerate registered pnp callbacks for a particular interface class based on reversal of IoRegisterPlugPlayNotification☆11Updated 11 months ago
- silence file system monitoring components by hooking their minifilters☆54Updated last year
- Hijack NotifyRoutine for a kernelmode thread☆41Updated 2 years ago
- Injector with kernel power☆16Updated 4 years ago
- XOrCryptEx lightweight C Utility/Algorithm☆11Updated 2 years ago
- Experiment to use sections as User/Kernelmode comm vector☆20Updated last year
- combine the power of procmon and dbgview into one single application☆6Updated last year
- UnknownField is a tool based clang that obfuscating the order of fields to protect your C/C++ game or code.☆44Updated 2 years ago
- Register a callback from a Manually mapped kernel module☆15Updated 3 years ago
- ☆30Updated 4 years ago
- ☆21Updated last year
- ☆27Updated 2 years ago
- A packed & protected Module Loader and more, for 64-bit Windows☆28Updated 3 years ago
- Walks the Process' VAD list to grab the PTE's corresponding to a usermode virtual address, all to get the physical address☆24Updated 3 years ago
- EDR PoC WIP LLC☆10Updated last year
- Helper Script to convert a Windbg dumped structure (using the 'dt' command) into a C structure. It creates dummy structs for you if neede…☆26Updated last year
- Bypassing kernel patch protection runtime☆19Updated 2 years ago
- Protected Process Light Library☆18Updated 4 years ago
- This is a POC Test project for INTEL CPUs on blocking NMI Entries through the IDT Handler.☆35Updated 4 months ago
- Single header library to simplify the usage of direct syscalls. x64/x86☆11Updated last year
- x64 assembler library☆31Updated 8 months ago
- Rookit and anti rookit on Windows platform☆12Updated 9 months ago
- A native Windows library for intercepting kernel-to-user transitions using instrumentation callbacks☆17Updated last year
- Elevate arbitrary MSR writes to kernel execution.☆26Updated last year
- Disk based DMA for ATA and SCSI☆18Updated last year
- Static Library For Windows Drivers☆33Updated this week
- ZeroImport is a lightweight and easy to use C++ library for Windows Kernel Drivers. It allows you to hide any import in your kernel drive…☆48Updated last year
- Analysing and defeating PatchGuard universally☆34Updated 4 years ago
- x64 Windows privilege elevation using anycall☆21Updated 3 years ago