A mini filter driver development framework allows you to develop minit filter driver with different features.
☆74Sep 24, 2026Updated last month
Alternatives and similar repositories for mini-filter-driver-framework
Users that are interested in mini-filter-driver-framework are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- A C# process filter driver example which was implemented with the Process Filter Driver SDK. The Process Filter Driver SDK is a kernel-mo…☆14Sep 24, 2026Updated last month
- A Practical example of ELAM (Early Launch Anti-Malware)☆35Nov 12, 2021Updated 4 years ago
- This is the AV ("protection solution") used for my windows 10 rootkit main project. this includes the installer stager program, a service…☆13May 2, 2024Updated 2 years ago
- how to monitor the file activities on file system level, capture file open, create, overwrite, read, write, query file information, set f…☆23Sep 24, 2026Updated last month
- JavaScript debugger extension for WinDbg that allows to dump the partitions running on Hyper-V☆12Jul 28, 2021Updated 5 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- File security filter driver SDK, implemented with a Windows file system filter driver framework. It allows you to implement file audit, …☆19Sep 24, 2026Updated last month
- Uses Threat-Intelligence ETW events to identify shellcode regions being hidden by fluctuating memory protections☆189May 17, 2023Updated 3 years ago
- A proof of concept of real custom GetProcAddress and GetModuleBaseAddress☆20Jul 9, 2022Updated 4 years ago
- PoC tools of Bytecode Jiu-Jitsu presented at Black Hat USA 2024 Briefings☆24Aug 31, 2025Updated last year
- Use ci.dll API for validating Authenticode signature of files☆171Mar 28, 2022Updated 4 years ago
- Use ci.dll API for validating Authenticode signature of files☆12Mar 28, 2022Updated 4 years ago
- WinDbg cheat sheet☆17May 10, 2023Updated 3 years ago
- ☆12May 30, 2019Updated 7 years ago
- Playing with packets in C#☆15Aug 16, 2024Updated 2 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- very simple masm64 example to demonstrate how to compile MASM 64 bit using NMake/CMake☆14Aug 23, 2022Updated 4 years ago
- A library that can map one IP-Port to another IP-Port.☆30Jun 11, 2019Updated 7 years ago
- Finding Truth in the Shadows☆127Jan 26, 2023Updated 3 years ago
- A C# transparent file encryption example which was implemented with the Transparent Encryption File System Filter Driver SDK. The Transp…☆15Sep 24, 2026Updated last month
- EaseFilter File Security Filter Driver SDK. EaseFilter Comprehensive File Security SDK is a set of file system filter driver software dev…☆16Sep 24, 2026Updated last month
- A library for working with NTFS Reparse Points☆23Sep 6, 2019Updated 7 years ago
- ☆35Sep 12, 2024Updated 2 years ago
- A small NtCreateUserProcess PoC that spawns a Command prompt.☆106Apr 11, 2026Updated 6 months ago
- This repo contains EXPs about Vulnerable Windows Driver☆46May 22, 2024Updated 2 years ago
- Open source password manager - Proton Pass • AdSecurely store, share, and autofill your credentials with Proton Pass, the end-to-end encrypted password manager trusted by millions.
- With the folder locker you can prevent your protected files being read,written,deleted, renamed, copied out of the protected folder, allo…☆13Sep 24, 2026Updated last month
- Helper functions for calculating the authenticode digest for a portable executable file☆21Apr 30, 2020Updated 6 years ago
- A simple program to hook the current process to identify the manual syscall executions on windows☆264Nov 18, 2022Updated 3 years ago
- A simple POC to show how to chain multiple callbacks via tail calls to artificially construct a call stack☆114May 25, 2026Updated 5 months ago
- Guest services for eryph☆14Updated this week
- KrabsETW provides a modern C++ wrapper and a .NET wrapper around the low-level ETW trace consumption functions.☆812Updated this week
- Projects I did during the reading of @zodiacon's Windows Kernel Programming book☆10Apr 9, 2021Updated 5 years ago
- Record & prevent file deletion in kernel mode☆44Jul 22, 2020Updated 6 years ago
- .data ptr swapper for newer win32k versions. (Supports Windows 11)☆38Jan 19, 2026Updated 9 months ago
- GPUs on demand by Runpod - Special Offer Available • AdRun AI, ML, and HPC workloads on powerful cloud GPUs—without limits or wasted spend. Deploy GPUs in under a minute and pay by the second.
- Windows 11 24H2-25H2 Runtime PatchGuard Bypass☆276Nov 4, 2025Updated 11 months ago
- Windows file system filter driver - illustration of the technology☆106May 4, 2020Updated 6 years ago
- Apex Legends External Cheat☆10Sep 18, 2021Updated 5 years ago
- The Kernel-Mode Winsock library, supporting TCP, UDP and Unix sockets (DGRAM and STREAM).☆297Sep 19, 2026Updated last month
- The goal of the tool is to monitor requests received by selected device objects or kernel drivers. The tool is quite similar to IrpTracke…☆419Dec 27, 2024Updated last year
- An example driver for Windows that shows how to set-up some basic components of the Windows Filtering Platform☆207Jul 6, 2022Updated 4 years ago
- Dll hijack -- just one macro☆13Jul 3, 2023Updated 3 years ago