A POC for Windows Extension Host hooking
☆24Jul 13, 2019Updated 6 years ago
Alternatives and similar repositories for exthost
Users that are interested in exthost are comparing it to the libraries listed below
Sorting:
- POC for a race condition exploit using directory junctions in Windows☆17Apr 26, 2020Updated 5 years ago
- Final Transparent encrypted version☆14Jan 10, 2017Updated 9 years ago
- Open Course for diving security internal☆52Nov 11, 2019Updated 6 years ago
- 粗暴地枚举管理内核的WFP对象。 Manage kernel WFPs in a brutal way.☆27Jan 14, 2018Updated 8 years ago
- Research on Windows Kernel Executive Callback Objects☆316Feb 22, 2020Updated 6 years ago
- INF Studio for easier working with driver installation files☆39Nov 11, 2023Updated 2 years ago
- This repository contains some tools that I have written in the past☆29Nov 11, 2023Updated 2 years ago
- A driver that hooks C: volume using symbolic link callback to track all FS access to the volume☆109Apr 24, 2020Updated 5 years ago
- hooking KiUserApcDispatcher☆27Apr 3, 2017Updated 8 years ago
- ☆29Jan 15, 2021Updated 5 years ago
- exploit termdd.sys(support kb4499175)☆61Jul 15, 2019Updated 6 years ago
- Tools made for my Hyper-V blog series @ https://foxhex0ne.blogspot.com/☆58Jun 21, 2020Updated 5 years ago
- ☆25May 21, 2021Updated 4 years ago
- ☆20Mar 15, 2023Updated 3 years ago
- An IDA plugin to deal with Event Tracing for Windows (ETW)☆56Jul 8, 2022Updated 3 years ago
- Intercepting DeviceControl via WPP☆138Nov 18, 2019Updated 6 years ago
- Bypass UAC elevation on Windows 8 (build 9600) & above.☆58Feb 2, 2026Updated last month
- x86/x64 dll injector☆31May 17, 2022Updated 3 years ago
- A native hypervisor designed for the Windows operating system☆125Mar 6, 2021Updated 5 years ago
- copy of tdifw lib☆10Jun 15, 2017Updated 8 years ago
- ☆15Jul 22, 2024Updated last year
- C Header Only Library for Virii☆11Nov 17, 2020Updated 5 years ago
- Some research on AltSystemCallHandlers functionality in Windows 10 20H1 18999☆241Nov 6, 2019Updated 6 years ago
- Microsoft decompiled IrDA drivers☆16Apr 15, 2015Updated 10 years ago
- 对Windbg以Exdi模式下调试windows做一些修复☆21Aug 25, 2023Updated 2 years ago
- ☆44Oct 7, 2018Updated 7 years ago
- A quick String < - > HEX tool for Windows with Drag & Drop and File saving☆11Dec 4, 2018Updated 7 years ago
- HAXM hypervisor client☆18Nov 30, 2018Updated 7 years ago
- ☆24Mar 4, 2019Updated 7 years ago
- Windows device tree walker☆15Sep 19, 2018Updated 7 years ago
- simple driver to read and write☆20Apr 13, 2025Updated 11 months ago
- Monitor ETW events for Windows process mitigation policies, with stack traces☆31Oct 7, 2022Updated 3 years ago
- Retrieve pointers to undocumented kernel functions and offsets to members within undocumented structures to use in your driver by using t…☆65Jun 19, 2019Updated 6 years ago
- Driver demonstrating how to register a DPC to asynchronously wait on an object☆50Jan 15, 2021Updated 5 years ago
- Utility for dumping all the information Capstone has on given instructions.☆23Oct 1, 2021Updated 4 years ago
- Analyze Windows x64 Kernel Memory Layout☆130Nov 19, 2020Updated 5 years ago
- Debug Print viewer (user and kernel)☆72Feb 7, 2024Updated 2 years ago
- ☆27May 4, 2018Updated 7 years ago
- Code Integrity Violation Spotter☆17Jun 11, 2024Updated last year