KANKOSHEV / Detect-KeAttachProcess
Detect-KeAttachProcess by iterating through all processes as well as checking the context of the thread.
☆110Updated 2 years ago
Related projects ⓘ
Alternatives and complementary repositories for Detect-KeAttachProcess
- ☆150Updated 6 months ago
- This project will give you an example how you can hook a kernel vtable function that cannot be directly called☆80Updated 2 years ago
- Discarded Section Manual Map☆66Updated 4 years ago
- ☆49Updated 2 years ago
- Unknowncheats Magically Optimized Tidy Mapper using nvaudio☆100Updated 5 months ago
- based on https://github.com/secrary/Hooking-via-InstrumentationCallback☆67Updated 5 years ago
- Virtual and physical memory hacking library using gigabyte vulnerable driver☆70Updated last year
- ☆132Updated 10 months ago
- base for testing☆156Updated last month
- x64 manual mapper using inline syscalls☆5Updated 3 years ago
- A basic demonstration of directly overwriting paging structures for physical memory r/w and interprocess memory copy☆80Updated last year
- driver manual mapper powered by https://github.com/estimated1337/lenovo_exec☆102Updated last year
- Hygieia, a vulnerable driver traces scanner written in C++ as an x64 Windows kernel driver.☆135Updated 2 years ago
- Standard Kernel Library for Windows hacking in C++☆91Updated 3 months ago
- Check your detection vectors☆137Updated this week
- Kernel driver that uses Shared memory to communicate with UserMode☆84Updated 5 years ago
- ☆78Updated 3 years ago
- ☆125Updated last year
- Bypassing EasyAntiCheat.sys self-integrity by abusing call hierarchy☆78Updated 2 years ago
- Kernel Lazy Importer☆111Updated 7 months ago
- A proof of concept demonstrating communication via mapped shared memory structures between a user-mode process and a kernel-mode payload …☆74Updated 3 years ago
- ☆194Updated last year
- manually map driver for a signed driver memory space☆138Updated 3 years ago
- a minimalistic windows hypervisor for amd processors☆98Updated 2 years ago
- ☆76Updated 2 years ago
- Shows an example of how to implement VT-d/AMD-Vi on Windows☆81Updated last year
- ☆177Updated 2 years ago
- ☆50Updated 11 months ago
- nmi stackwalking + module verification☆91Updated 10 months ago