Just an example of a well-known technique to detect memory tampering via Windows Working Sets.
☆18Jan 15, 2022Updated 4 years ago
Alternatives and similar repositories for QueryWorkingSetExample
Users that are interested in QueryWorkingSetExample are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- External Hooking ( Bypasss process byte patching checks | Injector included )☆21Mar 12, 2023Updated 3 years ago
- Walks the Process' VAD list to grab the PTE's corresponding to a usermode virtual address, all to get the physical address☆23Nov 22, 2021Updated 4 years ago
- ☆14May 4, 2022Updated 4 years ago
- ☆11Sep 26, 2026Updated last month
- Illustrates the concept of return address spoofing, and how it is used.☆14May 13, 2020Updated 6 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- IO隐藏通信封装☆17May 31, 2021Updated 5 years ago
- kernel driver used to monitor the activity of BadlionAnticheat.sys by patching its IAT☆32Jul 9, 2021Updated 5 years ago
- ☆17Apr 10, 2025Updated last year
- Hijack NotifyRoutine for a kernelmode thread☆39Jun 4, 2022Updated 4 years ago
- clearing traces of a loaded driver☆48Jul 2, 2022Updated 4 years ago
- Use NtSetInformationThread(ThreadBreakOnTermination) for anti-debugging☆16Sep 21, 2019Updated 7 years ago
- Disable threat tracing from the kernel..☆14Apr 8, 2022Updated 4 years ago
- hooks gServerHandlers xxxEventWndProc☆12May 1, 2022Updated 4 years ago
- Interprocess communication via a covert timing channel☆25Oct 24, 2025Updated last year
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- ☆17Jan 9, 2023Updated 3 years ago
- Hook NtDeviceIoControlFile with PatchGuard☆103May 10, 2022Updated 4 years ago
- ☆18Feb 5, 2025Updated last year
- PointerGuard is a proof-of-concept tool used to create 'guarded' pointers which disguise pointer addresses, monitor reads/writes, and pre…☆55May 23, 2022Updated 4 years ago
- Known ring3 memory protections that can be handled at a simple level.☆66Jan 28, 2023Updated 3 years ago
- ☆50Feb 21, 2022Updated 4 years ago
- Bypassing EasyAntiCheat.sys self-integrity by abusing call hierarchy☆81Oct 6, 2022Updated 4 years ago
- ☆21Aug 25, 2023Updated 3 years ago
- 对Windbg以Exdi模式下调试windows做一些修复☆21Aug 25, 2023Updated 3 years ago
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- ☆75Dec 17, 2019Updated 6 years ago
- Proof of Concept Kernel-User Communication using System Thread.☆13Sep 24, 2023Updated 3 years ago
- Compile-Time Strings and Numbers Encryption for C++20☆57Feb 9, 2025Updated last year
- ☆17Jun 30, 2020Updated 6 years ago
- Walks through the 4-level paging structures in Windows x64☆14Feb 12, 2023Updated 3 years ago
- Spoofing the NVIDIA GPU UUID by modifying "nvlddmkm.sys"☆21Sep 11, 2024Updated 2 years ago
- silence file system monitoring components by hooking their minifilters☆63Jan 31, 2024Updated 2 years ago
- A simple way to spoof return addresses using an exception handler☆43Aug 3, 2022Updated 4 years ago
- Public Release☆16Mar 27, 2019Updated 7 years ago
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- An attempt to restore and adapt to modern Win10 version the 'Rootkit Arsenal' original code samples☆74Apr 11, 2022Updated 4 years ago
- A poc that abuses Enclave☆40Sep 8, 2022Updated 4 years ago
- Some drivers I've written while solving exercises from Practical Reverse Engineering☆15Jan 9, 2022Updated 4 years ago
- Implementation of several code injection techniques.☆25Mar 12, 2022Updated 4 years ago
- ☆17Dec 18, 2022Updated 3 years ago
- Synchronized Kernel Drawing for 24H2☆24Oct 9, 2025Updated last year
- Compileable POC of namazso's x64 return address spoofer.☆51Jun 10, 2020Updated 6 years ago