GoodstudyChina / APC-injection-x86-x64
☆66Updated 6 years ago
Alternatives and similar repositories for APC-injection-x86-x64:
Users that are interested in APC-injection-x86-x64 are comparing it to the libraries listed below
- 让Etwhook再次伟大! Make InfinityHook Great Again!☆128Updated 3 years ago
- Hook NtDeviceIoControlFile with PatchGuard☆103Updated 2 years ago
- ☆123Updated 4 years ago
- Collect various versions of ntoskrnl files☆48Updated last year
- a monitoring windows driver calls kernel api tools☆102Updated 7 months ago
- 收集常用windows版本内核文件☆32Updated last year
- D☆41Updated 3 years ago
- Force a file delete using a windows kernel driver☆62Updated 2 years ago
- ☆125Updated 2 years ago
- ☆68Updated 2 years ago
- x64 free protect Features 1.process/thread handle protect 2.anti taskmgr.exe 3.hide process 4.anti-debugger(user/kernel debugger)☆81Updated 5 years ago
- Collect different versions of Crucial modules.☆129Updated 7 months ago
- An example of a client and server using Windows' ALPC functions to send and receive data.☆94Updated 3 weeks ago
- ☆53Updated 2 years ago
- VT Hook☆46Updated 7 months ago
- 之前学习X64VT写的代码,很多坑,但是大体的逻辑还是完整的。现发出来给更多想学VT的人参考...☆66Updated 3 years ago
- ☆122Updated last year
- Hook system calls, context switches, page faults and more.☆33Updated 5 years ago
- Static user/kernel mode library that allows access to all functions and global variables by extracting offsets from the PDB☆80Updated last year
- a simple intel vt code both support x86 & x64. PatchGuard monitor.☆75Updated 3 years ago
- ShotHv☆133Updated 2 years ago
- Quick check of NT kernel exported&unexported functions/global variable offset NT内核导出以及未导出函数+全局变量偏移速查☆93Updated last year
- Process path modification x64☆53Updated 6 years ago
- Windows kernel drivers simple HTTP library for modern C++☆42Updated 6 years ago
- based on https://github.com/secrary/Hooking-via-InstrumentationCallback☆69Updated 5 years ago
- Resolve DOS MZ executable symbols at runtime☆96Updated 3 years ago
- Some garbage drivers written for getting started☆64Updated 5 years ago
- 可在非测试模式下符号化读取内核内存。Kernel memory can be read symbolically in non test mode。☆107Updated 2 years ago
- InfinityHookProMax: Make InfinityHook great great again☆42Updated last year
- ☆110Updated 5 years ago