A-Normal-User / Pretend_HideVirtualMemoryLinks
利用物理内存映射,实现虚拟内存的伪隐藏
☆85Updated 3 years ago
Alternatives and similar repositories for Pretend_HideVirtualMemory
Users that are interested in Pretend_HideVirtualMemory are comparing it to the libraries listed below
Sorting:
- 无痕注入1☆76Updated 4 years ago
- Hook NtDeviceIoControlFile with PatchGuard☆107Updated 3 years ago
- Free(or force?)file and delete it☆11Updated 6 years ago
- https://key08.com/index.php/2021/10/19/1375.html☆71Updated 3 years ago
- 不使用3环挂钩进行DWM桌面绘制☆80Updated 4 years ago
- Quick check of NT kernel exported&unexported functions/global variable offset NT内核导出以及未导出函数+全局变量偏移速查☆96Updated 2 years ago
- Enum and Remove Hook in Windows☆46Updated last week
- 研究和移除各种内核回调,在anti anti cheat的路上越走越远☆181Updated 3 years ago
- 驱动加载器 -> 利用iqvw64e.sys映射驱动☆56Updated 5 years ago
- sc4cpp is a shellcode framework based on C++☆95Updated 4 years ago
- Call NtCreateUserProcess directly as normal.☆75Updated 3 years ago
- CVE-2022-3699 with arbitrary kernel code execution capability☆71Updated 2 years ago
- 大数字驱动逆向代码☆75Updated 2 years ago
- Using NtCreateFile and NtDeviceIoControlFile to realize the function of winsock(利用NtCreateFile和NtDeviceIoControlFile 实现winsock的功能)☆114Updated 3 years ago
- ☆69Updated 3 years ago
- 一个windows内核驱动分析框架,对内核所有导出函数进行挂钩监控☆67Updated last month
- 收集常用windows版本内核文件☆34Updated 2 years ago
- 内核级别隐藏指定窗口☆57Updated 3 years ago
- Example of reading process memory through kernel special APC☆110Updated 2 years ago
- bootkit驱动映射,三环进程注入加载指定模块☆14Updated last year
- Heaven's Gate implementation in C for constructing x64 Win32 API call in x86 WoW64 processes.☆76Updated 4 years ago
- 滥用cow机制进行全局注入☆98Updated 4 years ago
- 让Etwhook再次伟大! Make InfinityHook Great Again!☆146Updated 4 years ago
- ☆53Updated 3 years ago
- 之前学习X64VT写的代码,很多坑,但是大体的逻辑还是完整的。现发出来给更多想学VT的人参考...☆71Updated 4 years ago
- Visual Studio 2019/2022 extension for building C/C++ projects with the LLVM Compiler Toolchain (installed separately).☆25Updated last year
- Windows kernel drivers simple HTTP library for modern C++☆42Updated 7 years ago
- ☆81Updated 3 years ago
- VT Hook☆49Updated last year
- 内存加载DLL 支持X86和X64(Memory PELoader Support X86 and X64)☆40Updated 2 years ago