Bypassing code hooks detection in modern anti-rootkits via building faked PTE entries.
☆83Jan 24, 2011Updated 15 years ago
Alternatives and similar repositories for PTBypass-PoC
Users that are interested in PTBypass-PoC are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Hidden kernel mode code execution for bypassing modern anti-rootkits.☆85Dec 23, 2010Updated 15 years ago
- Notes my learning steps about Windows-NT☆23May 18, 2017Updated 9 years ago
- A kernel level anti-rootkit tool which runs on the windows platform.☆92Apr 18, 2014Updated 12 years ago
- Kinject - kernel dll injector, currently available in x86 version, will be updated to x64 soon.☆32Apr 10, 2015Updated 11 years ago
- Simple tool for unpacking packed/protected malware executables.☆32Oct 27, 2011Updated 15 years ago
- End-to-end encrypted cloud storage - Proton Drive • AdSpecial offer: 40% Off Yearly / 80% Off First Month. Protect your most important files, photos, and documents from prying eyes.
- An analytical debugger programmed in C++, using Qt.☆22May 20, 2012Updated 14 years ago
- Minifilter Driver☆15Feb 10, 2017Updated 9 years ago
- hypervisor in windows device driver by intel vt☆14Aug 25, 2018Updated 8 years ago
- Windows kernel-mode callbacks tutorial driver☆46Aug 8, 2016Updated 10 years ago
- codes for my blog post: https://secrary.com/Random/InstrumentationCallback/☆180Nov 30, 2017Updated 8 years ago
- some classes which can help me to program kernel driver in Windows.☆16Feb 9, 2018Updated 8 years ago
- A tool to help malware analysts tell that the sample is injecting code into other process.☆79Aug 12, 2015Updated 11 years ago
- Modify process handle permissions☆60Nov 30, 2016Updated 9 years ago
- ☆30May 23, 2017Updated 9 years ago
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- A simple tool to help reverse engineers while dealing with obfuscated code.☆20Sep 5, 2016Updated 10 years ago
- ☆83Dec 3, 2017Updated 8 years ago
- Decrement Windows Kernel for fun and profit☆40Jan 29, 2018Updated 8 years ago
- ☆19Jul 20, 2015Updated 11 years ago
- A MultiTouch driver for touch injection on Windows 7☆12Oct 5, 2016Updated 10 years ago
- Bypass for the hardening against usage of tagWnd as a kernel read/write primitive☆32Mar 22, 2017Updated 9 years ago
- The dll that can hide itself and then delete itselft.☆33Mar 31, 2013Updated 13 years ago
- Disable Driver Callbacks☆104Oct 16, 2017Updated 9 years ago
- Automatically exported from code.google.com/p/virtdbg☆100Jun 25, 2015Updated 11 years ago
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- Code injection by hijacking threads in Windows 32-bit applications☆43Oct 3, 2018Updated 8 years ago
- WIP - Play with Intel VM Extensions☆23Jun 12, 2017Updated 9 years ago
- Windows Kernel Driver with C++ runtime☆180Sep 26, 2020Updated 6 years ago
- ☆15Jun 24, 2017Updated 9 years ago
- windows kernel File redirection☆20Sep 21, 2014Updated 12 years ago
- Windows inject☆17Jun 7, 2018Updated 8 years ago
- ☆14Mar 13, 2023Updated 3 years ago
- Decompile an x86 exe, and read PE infos.☆19Sep 29, 2018Updated 8 years ago
- ice9 - is anticheat based on usermode tricks and undocumented methods , builded as dll for loading trought the shibari framework☆25Jan 30, 2025Updated last year
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- RootKit & Cheat Scanner - Windows☆228Aug 9, 2019Updated 7 years ago
- An Attempt to Bypass Memory Scanners By Misusing the ntdll.dll "RT" Section.☆100Jan 3, 2016Updated 10 years ago
- Exploiting CPU-Z Driver To Turn Load Unsigned Drivers☆133Aug 10, 2017Updated 9 years ago
- Currently supports injecting signed/unsigned DLLs in 64-bit processes☆57Sep 14, 2020Updated 6 years ago
- Obtain remote process cookies by performing a brute-force attack on ntdll.RtlDecodePointer using known pointer encodings.☆22May 31, 2017Updated 9 years ago
- Test code only. Not suitable for actual use.☆95Apr 19, 2015Updated 11 years ago
- WinPools is an example of how Windows kernel big pool addresses can be leaking using NtQuerySystemInformation☆15Jun 23, 2019Updated 7 years ago