silence file system monitoring components by hooking their minifilters
☆63Jan 31, 2024Updated 2 years ago
Alternatives and similar repositories for MinifilterHook
Users that are interested in MinifilterHook are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- a windows kernel keylogger that works☆20Feb 12, 2024Updated 2 years ago
- KDP compatible unsigned driver loader leveraging a write primitive in one of the IOCTLs of gdrv.sys☆172Jun 14, 2024Updated 2 years ago
- PoC exploit for HP Hardware Diagnostic's EtdSupp driver☆52May 13, 2023Updated 3 years ago
- filter driver to hide files and directories☆27Feb 12, 2024Updated 2 years ago
- ☆48Jul 7, 2024Updated 2 years ago
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- windows kernel pagehook☆43Oct 30, 2022Updated 4 years ago
- Windows file system driver which allows to block access to files at run-time (C/C++, C#, WDK, SDK)☆12Jan 1, 2023Updated 3 years ago
- Register a callback from a Manually mapped kernel module☆14Feb 1, 2022Updated 4 years ago
- Implementation of an export address table protection mitigation, like Export Address Filtering (EAF)☆114May 21, 2023Updated 3 years ago
- just proof of concept. hooking MmCopyMemory PG safe.☆101Nov 13, 2023Updated 2 years ago
- Custom KiSystemStartup, can be used to modificate kernel before boot.☆52Apr 7, 2022Updated 4 years ago
- 正确解析 _HEAP_VS_***符号 ,支持在最新win11 24h2 运行,替换windbg自带的!pool命令☆17Nov 30, 2024Updated last year
- DSE & PG bypass via BYOVD attack☆83Jul 12, 2025Updated last year
- Hooking Heavens Gate in a weekend☆12Jan 1, 2022Updated 4 years ago
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- A basic demonstration of directly overwriting paging structures for physical memory r/w and interprocess memory copy☆106Jun 26, 2023Updated 3 years ago
- PsSetCreateProcessNotifyRoutine/Ex/Ex2 hook☆13May 30, 2024Updated 2 years ago
- Manual mapper that uses PTE manipulation, Virtual Address Descriptor (VAD) manipulation, and forceful memory allocation to hide executabl…☆420Jan 29, 2022Updated 4 years ago
- Abusing nvidia driver (nvoclock.sys) for physical/virtual memory and control register manipulation.☆301Mar 16, 2026Updated 7 months ago
- PoC kernel to usermode injection☆143Feb 26, 2024Updated 2 years ago
- POC about how to prevent windbg break☆15Oct 3, 2022Updated 4 years ago
- ntoskrnl .data hooks for UM-KM communication☆53May 26, 2024Updated 2 years ago
- Patches DSE by swapping both data ptrs located in SeValidateImageHeader && SeValidateImageData☆26Feb 9, 2024Updated 2 years ago
- ☆16Apr 18, 2023Updated 3 years ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- Just an example of a well-known technique to detect memory tampering via Windows Working Sets.☆18Jan 15, 2022Updated 4 years ago
- Recursive and arbitrary code execution at kernel-level without a system thread creation☆159Mar 16, 2026Updated 7 months ago
- A Practical example of ELAM (Early Launch Anti-Malware)☆35Nov 12, 2021Updated 4 years ago
- What makes it page☆17Aug 24, 2022Updated 4 years ago
- Use hardware breakpoints to spoof the call stack for both syscalls and API calls☆205Jun 6, 2024Updated 2 years ago
- Technion CS Ransomware Project: Writing Windows Mini-Filter Driver to protect PC from Ransomware☆38Feb 11, 2021Updated 5 years ago
- ☆114Oct 6, 2023Updated 3 years ago
- ☆38Sep 26, 2024Updated 2 years ago
- ☆33Dec 22, 2020Updated 5 years ago
- Serverless GPU API endpoints on Runpod - Get Bonus Credits • AdSkip the infrastructure headaches. Auto-scaling, pay-as-you-go, no-ops approach lets you focus on innovating your application.
- Drawing from kernelmode without any hooks☆176Jul 7, 2022Updated 4 years ago
- Rendering on external windows via hijacking thread contexts, with notes on ValidateHwnd☆14Jul 9, 2020Updated 6 years ago
- Loads a signed kernel driver which allows you to map any driver to kernel mode without any traces of the signed / mapped driver.☆424Aug 8, 2021Updated 5 years ago
- Walks through the 4-level paging structures in Windows x64☆14Feb 12, 2023Updated 3 years ago
- ☆10Updated this week
- Handle elevation DKOM against ObRegisterCallbacks☆351Sep 20, 2018Updated 8 years ago
- Walks the Process' VAD list to grab the PTE's corresponding to a usermode virtual address, all to get the physical address☆23Nov 22, 2021Updated 4 years ago