DATA-GaMi / WindowsKernelBookLinks
《Windows 内核安全编程技术实践》 系列丛书,探索 Anti RootKit 反内核工具核心原理与技术实现细节。
☆64Updated 2 years ago
Alternatives and similar repositories for WindowsKernelBook
Users that are interested in WindowsKernelBook are comparing it to the libraries listed below
Sorting:
- shellcode 生成框架☆271Updated 3 years ago
- 隐藏可执行内存☆261Updated 3 months ago
- 大数字驱动逆向代码☆71Updated last year
- 一款64位Exe程序动态追踪执行流程以及保存信息的工具☆48Updated 8 months ago
- about how to make a anti-virus engine☆77Updated 2 months ago
- ☆18Updated 3 years ago
- 滴水中级内核学习☆31Updated 2 years ago
- windwos内核研究与驱动Code☆65Updated 3 years ago
- IDA Python script for generating Windows x86 shellcode with one click☆37Updated 2 years ago
- myLittleBear☆58Updated 3 weeks ago
- 尽量汇聚反调试资源和利用对抗技术☆179Updated last year
- 《Windows内核编程》学习☆59Updated 4 years ago
- ☆44Updated last year
- VM一键加壳/脱壳,全压缩,反调试等☆308Updated last year
- 一个用来做windows内核hook的框架☆172Updated 3 months ago
- 通杀检测基于白文件patch黑代码的免杀技术的后门☆172Updated 11 months ago
- Mhy Exp (exploit signed driver)☆142Updated 3 years ago
- 一个基于LKM的Linux内核级rootkit的实现,包含模块隐藏、提权、文件隐藏、进程隐藏、端口隐藏功能☆102Updated last year
- 简单安排一下 autochk.sys 这个rootkit☆72Updated 2 years ago
- It's a kernel-based keylogger for Windows x86/x64.☆141Updated 2 years ago
- 汇总了目前可以找到的所有的进程注入的方式,完成了x86/x64下的测试,不断更新中☆279Updated 3 years ago
- hijack dll Source Code Generator .☆215Updated 11 months ago
- 内核级别隐藏指定窗口☆318Updated 3 years ago
- 一个windows内核驱动分析框架,对内核所有导出函数进行挂钩监控☆57Updated 2 months ago
- WINDOWS黑客編程技術詳解 [Windows-Hack-Programming backup]☆45Updated 6 years ago
- 非编译时代码混淆,包括代码块拆分、代码乱序、常量加密、代码变异、抹除jcc、局部混淆等,主要提供框架以及思路☆31Updated 2 years ago
- 有需求做攻防对抗,买本书学习下常见技术,例子敲一敲☆224Updated 4 years ago
- 利用物理内存映射,实现虚拟内存的伪隐藏☆83Updated 2 years ago
- 研究和移除各种内核回调,在anti anti cheat的路上越走越远☆178Updated 2 years ago
- 复现《EDR的梦魇:Storm-0978使用新型内核注入技术“Step Bear”》☆138Updated 9 months ago