Flerov / EAKC-EnumAllKernelCallbacks
Enumerate Callbacks and all Object Types
☆13Updated last year
Related projects ⓘ
Alternatives and complementary repositories for EAKC-EnumAllKernelCallbacks
- Set the process mitigation policy for loading only Microsoft Modules , and block any userland 3rd party modules☆42Updated last year
- PoC exploit for HP Hardware Diagnostic's EtdSupp driver☆50Updated last year
- Tiny driver patch to allow kernel callbacks to work on Win10 21h1☆31Updated 2 years ago
- Former Multi - Ring to Kernel To UserMode Transitional Shellcode For Remote Kernel Exploits☆28Updated 2 years ago
- Hook all callbacks which are registered with LdrRegisterDllNotification☆83Updated last year
- ☆98Updated 2 years ago
- Code used in this post https://captmeelo.com/redteam/maldev/2022/04/21/kernelcallbacktable-injection.html☆100Updated 2 years ago
- ☆12Updated 2 years ago
- An initial proof of concept of a bootkit based on Cr4sh's DMABackdoorBoot☆59Updated last year
- One Click Tool to Scan All the Enabled Protection of current Windows NT Kernel☆43Updated last year
- ☆22Updated last year
- ☆27Updated 4 months ago
- Research of modifying exported function names at runtime (C/C++, Windows)☆16Updated 5 months ago
- ☆27Updated last year
- A VMWare logger using built-in backdoor.☆25Updated last month
- Dll injection through code page id modification in registry. Based on jonas lykk research☆117Updated last year
- Your NTDLL vaccine from modern direct syscall methods.☆35Updated 2 years ago
- Reimplementation of the KExecDD DSE bypass technique.☆42Updated 2 months ago
- ☆37Updated last year
- Next gen process injection technique☆42Updated 4 years ago
- Read Memory without ReadProcessMemory for Current Process☆74Updated 2 years ago
- Listing UDP connections with remote address without sniffing.☆30Updated last year
- Uses Threat-Intelligence ETW events to identify shellcode regions being hidden by fluctuating memory protections☆96Updated last year
- Monitors ETW for security relevant syscalls maintaining the set called by each unique process☆49Updated last year
- An attempt at reversing WindowsDefender☆20Updated last month
- Finding Truth in the Shadows☆84Updated last year
- Research into removing strings & API call references at compile-time (Anti-Analysis)☆24Updated 5 months ago
- A kernel exploit leveraging NtUserHardErrorControl to elevate a thread to KernelMode and achieve arbitrary kernel R/W & more.☆28Updated 2 years ago
- Enabled / Disable LSA Protection via BYOVD☆62Updated 2 years ago