research revolving the windows filtering platform callout mechanism
☆42May 26, 2024Updated 2 years ago
Alternatives and similar repositories for WFPCalloutReserach
Users that are interested in WFPCalloutReserach are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Source files for my posts☆17Jun 20, 2023Updated 3 years ago
- ☆33Dec 22, 2020Updated 5 years ago
- Enumerate Callbacks and all Object Types☆17Jan 9, 2023Updated 3 years ago
- anti-ransomware file-system filter☆70Sep 3, 2024Updated 2 years ago
- Windows Kernel Security: Memory Integrity Verification with Disk Verification of ntoskrnl.exe☆28Mar 23, 2025Updated last year
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- WFP Traffic Redirection Driver is used to redirect NIC traffic on network layer and framing layer, based on Windows Filtering Platform (W…☆118Jun 30, 2018Updated 8 years ago
- Some drivers I've written while solving exercises from Practical Reverse Engineering☆15Jan 9, 2022Updated 4 years ago
- ☆26Jul 15, 2023Updated 3 years ago
- Disable threat tracing from the kernel..☆14Apr 8, 2022Updated 4 years ago
- ☆16Oct 7, 2020Updated 6 years ago
- A template programming library for Kernel Mode Windows drivers.☆13Jul 12, 2016Updated 10 years ago
- ☆48Jul 7, 2024Updated 2 years ago
- exploder☆13Sep 21, 2024Updated 2 years ago
- An example code of CiGetCertPublisherName☆15Mar 24, 2022Updated 4 years ago
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- KDP compatible unsigned driver loader leveraging a write primitive in one of the IOCTLs of gdrv.sys☆172Jun 14, 2024Updated 2 years ago
- pg bypass for win10-win11 (learn from NP)☆17Oct 28, 2025Updated last year
- Automatically exported from code.google.com/p/windbgshark☆12Nov 3, 2015Updated 10 years ago
- 正确解析 _HEAP_VS_***符号 ,支持在最新win11 24h2 运行,替换windbg自带的!pool命令☆17Nov 30, 2024Updated last year
- Simple command line tool to enumerate loaded WFP callout drivers☆12Feb 2, 2024Updated 2 years ago
- Windows NT port of 'Main is usually a function. So then when is it not?'☆28Mar 11, 2024Updated 2 years ago
- Research on obfuscated licensing APIs / CLIP service in the Windows kernel☆146Aug 23, 2022Updated 4 years ago
- nmi stackwalking + module verification☆186Dec 28, 2023Updated 2 years ago
- Disks for DMA☆161Apr 28, 2021Updated 5 years ago
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- Bypassing kernel patch protection at runtime☆22Aug 16, 2026Updated 2 months ago
- (Moved to Codeberg) A screensaver for Windows that can run Shadertoy shaders locally with little to no modification.☆17Aug 12, 2025Updated last year
- Attempt to use WFP for proxy interception☆11Jan 13, 2019Updated 7 years ago
- Files for http://blog.deniable.org/posts/windows-callbacks/☆86Feb 26, 2022Updated 4 years ago
- ntoskrnl .data hooks for UM-KM communication☆52May 26, 2024Updated 2 years ago
- manual map unsigned driver over signed memory☆230Apr 11, 2024Updated 2 years ago
- Windows Feature IDs for review, diffing, etc., across multiple versions of Windows. Will be continuously updated.☆30Feb 24, 2026Updated 8 months ago
- clearing traces of a loaded driver☆48Jul 2, 2022Updated 4 years ago
- Minifilter Callback Patching Proof-of-Concept☆78Oct 31, 2022Updated 4 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Samples for the article "Interception and modifying TCP connections from kernel on Windows and Linux systems"☆14Jun 30, 2026Updated 4 months ago
- ☆19Oct 31, 2022Updated 4 years ago
- ☆19May 22, 2024Updated 2 years ago
- Proof-of-concept kernel driver that hijacks the Windows kernel extension table mechanism to preserve process notify callbacks even when a…☆100Jul 7, 2025Updated last year
- A simple MmCopyMemory hook.☆38Jul 11, 2022Updated 4 years ago
- Packet Injection With WFP☆16Jun 5, 2026Updated 4 months ago
- Code to make it easier to write an NDIS network driver on Windows☆95Oct 1, 2023Updated 3 years ago