MiroKaku / DetoursX
Kernel-Mode extended version of https://github.com/microsoft/Detours
☆132Updated 2 years ago
Related projects: ⓘ
- a Windows kernel Pdb parsing and downloading library that running purely in kernel mode without any R3 programs.☆108Updated last week
- The Universal C++ RunTime library, supporting kernel-mode C++ exception-handler and STL.☆55Updated 3 weeks ago
- query-pdb is a server-side software for parsing PDB files. The software provides PDB online parsing service.☆136Updated this week
- ☆155Updated 2 years ago
- A very simple C++ library for download pdb, get rva of function, global variable and offset from struct.☆106Updated 5 months ago
- Windows Driver Kit Extesion Header (Undoc)☆132Updated 2 years ago
- The Kernel-Mode Winsock library, supporting TCP, UDP and Unix sockets (DGRAM and STREAM).☆226Updated 5 months ago
- Collect different versions of Crucial modules.☆126Updated 2 months ago
- 可在非测试模式下符号化读取内核内存。Kernel memory can be read symbolically in non test mode。☆100Updated 2 years ago
- Kernel dwm render☆120Updated 11 months ago
- ☆120Updated 4 years ago
- This project migrated to https://github.com/backengineering/llvm-msvc☆140Updated last year
- Use ntdll/ntoskrnl to implement Kernel32, Advapi32 and other APIs. It includes user-mode and kernel-mode.☆61Updated 3 weeks ago
- Easy Anti PatchGuard☆212Updated 3 years ago
- ☆131Updated 2 years ago
- ☆124Updated last year
- Some psuedo snippets from BattlEye's BEDaisy.sys loaded on Rainbow Six: Siege.☆116Updated 2 years ago
- an encryption library designed for Windows kernel and driver programming☆113Updated last year
- Static user/kernel mode library that allows access to all functions and global variables by extracting offsets from the PDB☆69Updated last year
- 让Etwhook再次伟大! Make InfinityHook Great Again!☆120Updated 3 years ago
- ShotHv☆116Updated 2 years ago
- Another wow64ext to try to be compatible with WOW64 for all architectures.☆73Updated 3 months ago
- Simple Intel VT-x hypervisor☆247Updated 9 months ago
- Kernel DLL Injector using NX Bit Swapping and VAD hide for hiding injected DLL☆188Updated 3 years ago
- Use ci.dll API for validating Authenticode signature of files☆124Updated 2 years ago
- ☆92Updated 6 years ago
- Page fault hook use ept (Intel Virtualization Technology)☆172Updated 7 years ago
- A ProcMon-esque tool for monitoring Windows Kernel Drivers☆50Updated 3 years ago
- The program draws with win32k gdi functions in the kernel while NtGdiDdDDISubmitCommand is being hooked.☆241Updated 4 years ago
- Intercepting DeviceControl via WPP☆125Updated 4 years ago