silence file system monitoring components by hooking their minifilters
☆63Jan 31, 2024Updated 2 years ago
Alternatives and similar repositories for MinifilterHook
Users that are interested in MinifilterHook are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- a windows kernel keylogger that works☆20Feb 12, 2024Updated 2 years ago
- filter driver to hide files and directories☆27Feb 12, 2024Updated 2 years ago
- KDP compatible unsigned driver loader leveraging a write primitive in one of the IOCTLs of gdrv.sys☆171Jun 14, 2024Updated 2 years ago
- Windows file system driver which allows to block access to files at run-time (C/C++, C#, WDK, SDK)☆12Jan 1, 2023Updated 3 years ago
- a driver to enumerate registered pnp callbacks for a particular interface class based on reversal of IoRegisterPlugPlayNotification☆11Mar 13, 2024Updated 2 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- A Practical example of ELAM (Early Launch Anti-Malware)☆35Nov 12, 2021Updated 4 years ago
- PoC exploit for HP Hardware Diagnostic's EtdSupp driver☆52May 13, 2023Updated 3 years ago
- PsSetCreateProcessNotifyRoutine/Ex/Ex2 hook☆13May 30, 2024Updated 2 years ago
- 正确解析 _HEAP_VS_***符号 ,支持在最新win11 24h2 运行,替换windbg自带的!pool命令☆17Nov 30, 2024Updated last year
- Proof of Concept Kernel-User Communication using System Thread.☆13Sep 24, 2023Updated 3 years ago
- Implementation of an export address table protection mitigation, like Export Address Filtering (EAF)☆114May 21, 2023Updated 3 years ago
- ☆48Jul 7, 2024Updated 2 years ago
- just proof of concept. hooking MmCopyMemory PG safe.☆99Nov 13, 2023Updated 2 years ago
- Self delete DLL (2)☆14Feb 15, 2024Updated 2 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- PoC kernel to usermode injection☆140Feb 26, 2024Updated 2 years ago
- Just an example of a well-known technique to detect memory tampering via Windows Working Sets.☆18Jan 15, 2022Updated 4 years ago
- Freeze target threads (external - internal ) by avoiding SuspendThread detections. Or access registers from start address.☆35Mar 23, 2024Updated 2 years ago
- POC about how to prevent windbg break☆15Oct 3, 2022Updated 4 years ago
- Windows NT port of 'Main is usually a function. So then when is it not?'☆28Mar 11, 2024Updated 2 years ago
- Hooking Heavens Gate in a weekend☆12Jan 1, 2022Updated 4 years ago
- Manual mapper that uses PTE manipulation, Virtual Address Descriptor (VAD) manipulation, and forceful memory allocation to hide executabl…☆420Jan 29, 2022Updated 4 years ago
- A basic demonstration of directly overwriting paging structures for physical memory r/w and interprocess memory copy☆105Jun 26, 2023Updated 3 years ago
- Abusing nvidia driver (nvoclock.sys) for physical/virtual memory and control register manipulation.☆300Mar 16, 2026Updated 7 months ago
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- Custom KiSystemStartup, can be used to modificate kernel before boot.☆52Apr 7, 2022Updated 4 years ago
- ☆33Dec 22, 2020Updated 5 years ago
- ☆12Aug 2, 2023Updated 3 years ago
- What makes it page☆17Aug 24, 2022Updated 4 years ago
- DSE & PG bypass via BYOVD attack☆83Jul 12, 2025Updated last year
- CVE-2022-3699 with arbitrary kernel code execution capability☆73Dec 27, 2022Updated 3 years ago
- ☆16Apr 18, 2023Updated 3 years ago
- manual map unsigned driver over signed memory☆229Apr 11, 2024Updated 2 years ago
- Loads a signed kernel driver which allows you to map any driver to kernel mode without any traces of the signed / mapped driver.☆417Aug 8, 2021Updated 5 years ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- DUQU MALWARE SOURCE + BINARY + More coming☆14Feb 6, 2023Updated 3 years ago
- Recursive and arbitrary code execution at kernel-level without a system thread creation☆159Mar 16, 2026Updated 7 months ago
- ☆10Sep 10, 2026Updated last month
- BadExclusions is a tool to identify folder custom or undocumented exclusions on AV/EDR☆21Feb 8, 2024Updated 2 years ago
- Archive R/W into any protected process by changing the value of KTHREAD->PreviousMode☆162Jul 31, 2022Updated 4 years ago
- Use hardware breakpoints to spoof the call stack for both syscalls and API calls☆204Jun 6, 2024Updated 2 years ago
- windows kernel pagehook☆43Oct 30, 2022Updated 3 years ago