a driver to enumerate registered pnp callbacks for a particular interface class based on reversal of IoRegisterPlugPlayNotification
☆11Mar 13, 2024Updated 2 years ago
Alternatives and similar repositories for PnpNotifyResearch
Users that are interested in PnpNotifyResearch are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- a windows kernel keylogger that works☆20Feb 12, 2024Updated 2 years ago
- research revolving the windows filtering platform callout mechanism☆42May 26, 2024Updated 2 years ago
- ☆33Dec 22, 2020Updated 5 years ago
- filter driver to hide files and directories☆27Feb 12, 2024Updated 2 years ago
- Data and structures regarding the research done on WdFilter☆12Apr 15, 2020Updated 6 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- 正确解析 _HEAP_VS_***符号 ,支持在最新win11 24h2 运行,替换windbg自带的!pool命令☆17Nov 30, 2024Updated last year
- Windows NT port of 'Main is usually a function. So then when is it not?'☆28Mar 11, 2024Updated 2 years ago
- A simple MmCopyMemory hook.☆38Jul 11, 2022Updated 4 years ago
- Rendering on external windows via hijacking thread contexts, with notes on ValidateHwnd☆14Jul 9, 2020Updated 6 years ago
- Disks for DMA☆162Apr 28, 2021Updated 5 years ago
- An advanced DKOM for drivers with "DRIVER_OBJECT"☆23Feb 19, 2023Updated 3 years ago
- CVE-2022-3699 with arbitrary kernel code execution capability☆73Dec 27, 2022Updated 3 years ago
- PoC for Acronis Arbitrary File Read - CVE-2022-45451☆18Dec 20, 2022Updated 3 years ago
- detect hypervisor with Nmi Callback☆42Sep 25, 2022Updated 4 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Source files for my posts☆17Jun 20, 2023Updated 3 years ago
- Detects if a Kernel mode debugger is active by reading the value of KUSER_SHARED_DATA.KdDebuggerEnabled. It is a high level and portable …☆25Sep 18, 2017Updated 9 years ago
- Various WinDbg extensions and scripts☆35Sep 13, 2018Updated 8 years ago
- IDT HOOK KiPageFault test Modified from： github.com/kanren3/x64-IDT-HOOK☆18May 2, 2020Updated 6 years ago
- ☆48Jul 7, 2024Updated 2 years ago
- Usermode emulation of x64 EAC☆32Apr 30, 2021Updated 5 years ago
- A reflexive driver loader to bypass Windows DSE (featuring a custom PE loader)☆41Sep 1, 2018Updated 8 years ago
- 将驱动映射到会话空间☆40Aug 27, 2022Updated 4 years ago
- CVE-2018-19320 LPE Exploit☆11Jun 19, 2023Updated 3 years ago
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- ntoskrnl .data hooks for UM-KM communication☆53May 26, 2024Updated 2 years ago
- ☆43Jul 1, 2022Updated 4 years ago
- ☆27May 17, 2022Updated 4 years ago
- ☆58Jun 8, 2022Updated 4 years ago
- silence file system monitoring components by hooking their minifilters☆63Jan 31, 2024Updated 2 years ago
- nmi stackwalking + module verification☆183Dec 28, 2023Updated 2 years ago
- ☆29Oct 5, 2026Updated last week
- .lib file for linking against the NT CRT☆19Mar 18, 2022Updated 4 years ago
- a demo for x86/x64's paging memory management learning, convert a virtual address from ring3 to physical address in ring0☆18Aug 26, 2017Updated 9 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- NASM listing to shellcode converter☆14May 6, 2018Updated 8 years ago
- arbitrary kernel read/write in dbutil_2_3.sys, Proof of Concept Local Privilege Escalation to nt authority/system☆59Nov 16, 2021Updated 4 years ago
- .NET Framework 4.0 based Driver Loader for NoirVisor☆14Jan 12, 2021Updated 5 years ago
- A VMBR (Virtual-Machine Based Rootkit) which runs a guest OS and sends the attacker its data☆30Apr 27, 2024Updated 2 years ago
- A basic demonstration of directly overwriting paging structures for physical memory r/w and interprocess memory copy☆105Jun 26, 2023Updated 3 years ago
- VEH Redirect & VEH Debugger☆24May 18, 2020Updated 6 years ago
- ☆17Dec 3, 2020Updated 5 years ago