ExpLife0011/KeUserModeCallBack external links

---

GitHub - View repository

GitHub.dev - Open in online code editor

Star history - Growth chart over time

deps.dev - Dependencies and security vulnerabilities

Gitingest - Export source code for LLM usage

Repomix - Export source code for LLM usage

uithub - Export source code for LLM usage

Close

ExpLife0011/KeUserModeCallBack

Readme badge preview -

If you own this repo, copy the snippet below and add it to your README.md

---

Copy

[![RelatedRepos](https://img.shields.io/badge/related-repos-yellow)](https://relatedrepos.com/gh/ExpLife0011/KeUserModeCallBack)

Close

ExpLife0011 / KeUserModeCallBackView on GitHubMore

• External links
• Readme badge

A Simple Example

☆23Nov 30, 2018Updated 7 years ago

Alternatives and similar repositories for KeUserModeCallBack

Users that are interested in KeUserModeCallBack are comparing it to the libraries listed below

• 1401199262 / HookSwapContext

  View on GitHub
  ☆34Apr 11, 2023Updated 2 years ago
• Sentient111 / ClearDriverTraces

  View on GitHub
  clearing traces of a loaded driver
  ☆47Jul 2, 2022Updated 3 years ago
• 1401199262 / NMIStackWalk

  View on GitHub
  ☆73Aug 31, 2022Updated 3 years ago
• stuxnet147 / Win-Kernel-PiDqSerializationWrite-Example

  View on GitHub
  How to use PiDqSerializationWrite. Introduces how to safely read and write from mapped driver
  ☆26May 29, 2023Updated 2 years ago
• huoji120 / mash_hypervisor

  View on GitHub
  mash hypervisor host pml4
  ☆17Jun 22, 2022Updated 3 years ago
• mel2oo / Driver-for-windows

  View on GitHub
  ☆17Jun 30, 2020Updated 5 years ago
• armasm / EasyAntiPatchGuard

  View on GitHub
  Easy Anti PatchGuard
  ☆223Apr 9, 2021Updated 4 years ago
• adspro15 / DirectInput

  View on GitHub
  Simulate SendInput with ClassService
  ☆35Sep 5, 2018Updated 7 years ago
• WolfyZ99 / Kernel-RPM-WPM-with-Driver-Destroyer

  View on GitHub
  ☆12Jun 30, 2019Updated 6 years ago
• EBalloon / ThreadNotify

  View on GitHub
  ☆12Oct 12, 2021Updated 4 years ago
• xtremegamer1 / Illicit-memory-allocation

  View on GitHub
  This driver hooks a device object for ioctl and uses mdls to allocate physical pages and manually injects an entry into a process's page …
  ☆15Feb 14, 2023Updated 3 years ago
• ekknod / acdrv

  View on GitHub
  base for testing
  ☆186Sep 28, 2024Updated last year
• Zpes / pte-protect

  View on GitHub
  ☆37May 21, 2022Updated 3 years ago
• KANKOSHEV / Detect-HiddenThread-via-KPRCB

  View on GitHub
  Detect removed thread from PspCidTable.
  ☆75Mar 18, 2022Updated 3 years ago
• yottaawesome / basic-windows-drivers

  View on GitHub
  Basic experimentation with Windows drivers.
  ☆17Mar 3, 2023Updated 2 years ago
• nbqofficial / asm-lib

  View on GitHub
  Libraries written in inline assembly
  ☆19Aug 7, 2023Updated 2 years ago
• ekknod / KiSystemStartupMeme

  View on GitHub
  Custom KiSystemStartup, can be used to modificate kernel before boot.
  ☆53Apr 7, 2022Updated 3 years ago
• KiFilterFiberContext / VMP3-Disasm

  View on GitHub
  Experimental disassembler for x86 binaries virtualized by VMProtect 3
  ☆97Aug 27, 2022Updated 3 years ago
• boom-cr3 / VTableKFunctionHook

  View on GitHub
  This project will give you an example how you can hook a kernel vtable function that cannot be directly called
  ☆84Dec 25, 2021Updated 4 years ago
• xinnie-the-pooh / MS

  View on GitHub
  巨硬
  ☆17Oct 4, 2023Updated 2 years ago
• qq1045551070 / IoCommon

  View on GitHub
  IO隐藏通信封装
  ☆17May 31, 2021Updated 4 years ago
• 1401199262 / UnsuccessfulDriver

  View on GitHub
  ☆17Apr 21, 2022Updated 3 years ago
• kkent030315 / CiGetCertPublisherName

  View on GitHub
  An example code of CiGetCertPublisherName
  ☆17Mar 24, 2022Updated 3 years ago
• lennyRBLX / injection

  View on GitHub
  A resource for thread hijacking and manual mapping code, that works with MEM_MAPPED & MEM_IMAGE.
  ☆26Apr 17, 2021Updated 4 years ago
• kouzhudong / libdrv

  View on GitHub
  Static Library For Windows Drivers
  ☆41Dec 13, 2025Updated 2 months ago
• zodiacon / DbgPrint

  View on GitHub
  Debug Print viewer (user and kernel)
  ☆72Feb 7, 2024Updated 2 years ago
• alfarom256 / MinifilterResearch

  View on GitHub
  ☆16Oct 31, 2022Updated 3 years ago
• kagasu / VEHTest

  View on GitHub
  Example of making debugger using Hardware Breakpoint + VEH
  ☆18May 13, 2021Updated 4 years ago
• not-wlan / instrumentation-callbacks

  View on GitHub
  based on https://github.com/secrary/Hooking-via-InstrumentationCallback
  ☆73Oct 29, 2019Updated 6 years ago
• SamuelTulach / vmcheck

  View on GitHub
  ☆23Oct 28, 2020Updated 5 years ago
• SamuelTulach / EasyUefi

  View on GitHub
  Visual Studio template for GNU-EFI
  ☆16May 16, 2022Updated 3 years ago
• NeoMaster831 / rwDriver

  View on GitHub
  Executes Read/Write process memory with `NtQueryCompositionSurfaceStatistics`
  ☆23Feb 10, 2024Updated 2 years ago
• EBalloon / Remap

  View on GitHub
  ☆49Feb 21, 2022Updated 4 years ago
• ajkhoury / Errata1337

  View on GitHub
  ☆68Dec 17, 2020Updated 5 years ago
• pTerrance / alpc-km-um

  View on GitHub
  POC usermode <=> kernel communication via ALPC.
  ☆72Jun 6, 2024Updated last year
• ajkhoury / pubg_internal

  View on GitHub
  ☆31Oct 1, 2021Updated 4 years ago
• JustasMasiulis / args

  View on GitHub
  Header only library for binding, reordering and currying of function arguments without cost
  ☆17Jun 20, 2018Updated 7 years ago
• waleedassar / ALPC_CLIENT_SERVER

  View on GitHub
  Demo to show how write ALPC Client & Server using native Ntdll.dll syscalls.
  ☆21Jan 25, 2022Updated 4 years ago
• 1401199262 / Hook-KdTrap

  View on GitHub
  ☆223Mar 11, 2023Updated 2 years ago