ExpLife0011/KeUserModeCallBack external links

---

GitHub - View repository

GitHub.dev - Open in online code editor

Star history - Growth chart over time

deps.dev - Dependencies and security vulnerabilities

Gitingest - Export source code for LLM usage

Repomix - Export source code for LLM usage

uithub - Export source code for LLM usage

Close

ExpLife0011/KeUserModeCallBack

Readme badge preview -

If you own this repo, copy the snippet below and add it to your README.md

---

Copy

[![RelatedRepos](https://img.shields.io/badge/related-repos-yellow)](https://relatedrepos.com/gh/ExpLife0011/KeUserModeCallBack)

Close

ExpLife0011 / KeUserModeCallBackView on GitHubMore

• External links
• Readme badge

A Simple Example

☆23Nov 30, 2018Updated 7 years ago

Alternatives and similar repositories for KeUserModeCallBack

Users that are interested in KeUserModeCallBack are comparing it to the libraries listed below

• Sentient111 / ClearDriverTraces

  View on GitHub
  clearing traces of a loaded driver
  ☆47Jul 2, 2022Updated 3 years ago
• 1401199262 / HookSwapContext

  View on GitHub
  ☆34Apr 11, 2023Updated 2 years ago
• 1401199262 / NMIStackWalk

  View on GitHub
  ☆73Aug 31, 2022Updated 3 years ago
• armasm / EasyAntiPatchGuard

  View on GitHub
  Easy Anti PatchGuard
  ☆223Apr 9, 2021Updated 4 years ago
• stuxnet147 / Win-Kernel-PiDqSerializationWrite-Example

  View on GitHub
  How to use PiDqSerializationWrite. Introduces how to safely read and write from mapped driver
  ☆26May 29, 2023Updated 2 years ago
• EBalloon / ThreadNotify

  View on GitHub
  ☆12Oct 12, 2021Updated 4 years ago
• mel2oo / Driver-for-windows

  View on GitHub
  ☆17Jun 30, 2020Updated 5 years ago
• Sentient111 / StealingSignatures

  View on GitHub
  Stealing signatures from pe files
  ☆15Apr 1, 2025Updated 11 months ago
• zodiacon / DbgPrint

  View on GitHub
  Debug Print viewer (user and kernel)
  ☆72Feb 7, 2024Updated 2 years ago
• huoji120 / mash_hypervisor

  View on GitHub
  mash hypervisor host pml4
  ☆17Jun 22, 2022Updated 3 years ago
• KiFilterFiberContext / VMP3-Disasm

  View on GitHub
  Experimental disassembler for x86 binaries virtualized by VMProtect 3
  ☆98Aug 27, 2022Updated 3 years ago
• ekknod / acdrv

  View on GitHub
  base for testing
  ☆187Sep 28, 2024Updated last year
• kkent030315 / CiGetCertPublisherName

  View on GitHub
  An example code of CiGetCertPublisherName
  ☆16Mar 24, 2022Updated 3 years ago
• xtremegamer1 / Illicit-memory-allocation

  View on GitHub
  This driver hooks a device object for ioctl and uses mdls to allocate physical pages and manually injects an entry into a process's page …
  ☆15Feb 14, 2023Updated 3 years ago
• KANKOSHEV / Detect-HiddenThread-via-KPRCB

  View on GitHub
  Detect removed thread from PspCidTable.
  ☆75Mar 18, 2022Updated 4 years ago
• boom-cr3 / VTableKFunctionHook

  View on GitHub
  This project will give you an example how you can hook a kernel vtable function that cannot be directly called
  ☆84Dec 25, 2021Updated 4 years ago
• kagasu / VEHTest

  View on GitHub
  Example of making debugger using Hardware Breakpoint + VEH
  ☆18May 13, 2021Updated 4 years ago
• adspro15 / DirectInput

  View on GitHub
  Simulate SendInput with ClassService
  ☆35Sep 5, 2018Updated 7 years ago
• 1401199262 / HookHvcallCodeVa

  View on GitHub
  ☆23May 8, 2023Updated 2 years ago
• xtremegamer1 / vmdevirt-vtil

  View on GitHub
  ☆26Aug 7, 2023Updated 2 years ago
• kouzhudong / libdrv

  View on GitHub
  Static Library For Windows Drivers
  ☆41Dec 13, 2025Updated 3 months ago
• not-wlan / instrumentation-callbacks

  View on GitHub
  based on https://github.com/secrary/Hooking-via-InstrumentationCallback
  ☆73Oct 29, 2019Updated 6 years ago
• pTerrance / alpc-km-um

  View on GitHub
  POC usermode <=> kernel communication via ALPC.
  ☆72Jun 6, 2024Updated last year
• ajkhoury / pubg_internal

  View on GitHub
  ☆31Oct 1, 2021Updated 4 years ago
• ekknod / KiSystemStartupMeme

  View on GitHub
  Custom KiSystemStartup, can be used to modificate kernel before boot.
  ☆53Apr 7, 2022Updated 3 years ago
• Rantanen / ghidra-minidump-loader

  View on GitHub
  Windows Minidump loader for Ghidra
  ☆29Sep 30, 2022Updated 3 years ago
• yottaawesome / basic-windows-drivers

  View on GitHub
  Basic experimentation with Windows drivers.
  ☆17Mar 3, 2023Updated 3 years ago
• 1401199262 / UnsuccessfulDriver

  View on GitHub
  ☆17Apr 21, 2022Updated 3 years ago
• 1401199262 / Hook-KdTrap

  View on GitHub
  ☆225Mar 11, 2023Updated 3 years ago
• WolfyZ99 / Kernel-RPM-WPM-with-Driver-Destroyer

  View on GitHub
  ☆12Jun 30, 2019Updated 6 years ago
• lennyRBLX / injection

  View on GitHub
  A resource for thread hijacking and manual mapping code, that works with MEM_MAPPED & MEM_IMAGE.
  ☆26Apr 17, 2021Updated 4 years ago
• lennyRBLX / ret_addr_spoofer

  View on GitHub
  Compileable POC of namazso's x64 return address spoofer.
  ☆50Jun 10, 2020Updated 5 years ago
• JustasMasiulis / args

  View on GitHub
  Header only library for binding, reordering and currying of function arguments without cost
  ☆17Jun 20, 2018Updated 7 years ago
• qq1045551070 / IoCommon

  View on GitHub
  IO隐藏通信封装
  ☆17May 31, 2021Updated 4 years ago
• hugsy / shared-kernel-user-section-driver

  View on GitHub
  Experiment to use sections as User/Kernelmode comm vector
  ☆22Apr 7, 2023Updated 2 years ago
• btbd / wpp

  View on GitHub
  Intercepting DeviceControl via WPP
  ☆138Nov 18, 2019Updated 6 years ago
• vmcall / nt

  View on GitHub
  NT reversal
  ☆25Jul 12, 2018Updated 7 years ago
• alfarom256 / MinifilterResearch

  View on GitHub
  ☆17Oct 31, 2022Updated 3 years ago
• 0xcpu / exthost

  View on GitHub
  A POC for Windows Extension Host hooking
  ☆24Jul 13, 2019Updated 6 years ago