MellowNight / IOCTL-hook
realExtern.sys driver
☆65Updated 4 years ago
Alternatives and similar repositories for IOCTL-hook:
Users that are interested in IOCTL-hook are comparing it to the libraries listed below
- Stealthy Injector that leverages a vulnerable driver and other exploits to remain undetected☆36Updated 6 years ago
- reverse engineering of bedaisy.sys (battleyes kernel driver) - Aki2k/BEDaisy☆66Updated 4 years ago
- Handling C++ & __try exceptions without the need of built-in handlers.☆68Updated 3 years ago
- x64 manual mapper using inline syscalls☆6Updated 3 years ago
- Example of hijacking system calls via function pointer tables☆32Updated 3 years ago
- Detect removed thread from PspCidTable.☆70Updated 2 years ago
- A poc that abuses Enclave☆36Updated 2 years ago
- ☆34Updated 4 years ago
- Mapping your code on a 0x1000 size page☆70Updated 2 years ago
- mouseclassservicecallback detection via hook☆49Updated 2 years ago
- Analysing and defeating PatchGuard universally☆34Updated 4 years ago
- ☆43Updated 4 years ago
- Discarded Section Manual Map☆67Updated 4 years ago
- ☆49Updated 2 years ago
- UM-KM Communication using registry callbacks☆39Updated 4 years ago
- ☆46Updated 4 years ago
- detect hypervisor with Nmi Callback☆34Updated 2 years ago
- Some garbage drivers written for getting started☆64Updated 5 years ago
- Hiding a system thread against conventional means of detection☆36Updated 4 years ago
- scans through physical memory and paging tables in kernel mode☆106Updated 4 years ago
- ☆78Updated 3 years ago
- Скрытие строки от отладчиков и декомпиляторов☆49Updated 5 years ago
- Disk based DMA for ATA and SCSI☆16Updated last year
- Intraceptor intercept Windows NT API calls and redirect them to a kernel driver to bypass process/threads handle protections.☆28Updated 2 years ago
- Small class to parse debug info from PEs, download their respective PDBs from the Microsoft Public Symbol Server and calculate RVAs of fu…☆42Updated last year