MustafaNafizDurukan / WindowsKernelDriversLibraryLinks
Collection of Windows kernel driver examples, offering insights into Windows internals, rootkit evasion, and advanced driver development.
☆11Updated 2 years ago
Alternatives and similar repositories for WindowsKernelDriversLibrary
Users that are interested in WindowsKernelDriversLibrary are comparing it to the libraries listed below
Sorting:
- PsSetCreateProcessNotifyRoutine/Ex/Ex2 hook☆12Updated last year
- Compile-Time Calls Obfuscator for C++14+☆50Updated 2 years ago
- Helper functions for calculating the authenticode digest for a portable executable file☆21Updated 5 years ago
- silence file system monitoring components by hooking their minifilters☆58Updated last year
- Rookit and anti rookit on Windows platform☆13Updated last year
- Static Library For Windows Drivers☆40Updated last week
- ☆26Updated 6 years ago
- Bring Your Own Vulnerable Driver for PatchGuard & Driver Signature Enforcement☆14Updated last year
- Force a file delete using a windows kernel driver☆72Updated 3 years ago
- Protect a process from code injection, termination and hooking☆49Updated 4 years ago
- Protected Process Light Library☆18Updated 5 years ago
- Hook NtDeviceIoControlFile with PatchGuard☆107Updated 3 years ago
- Protect a file from being deleted using windows kernel file system minifilter driver☆40Updated 4 years ago
- Exploits Intel's signed iqvw64e.sys driver to allow manual mapping and read/writing of memory at a kernel level.☆13Updated 6 years ago
- windows rootkit☆60Updated last year
- filter driver to hide files and directories☆23Updated last year
- Windows 10/11 unsigned kernel driver load/debugging☆14Updated 2 years ago
- Executes Read/Write process memory with `NtQueryCompositionSurfaceStatistics`☆20Updated last year
- ☆52Updated 3 years ago
- research revolving the windows filtering platform callout mechanism☆35Updated last year
- ☆33Updated 4 years ago
- Compact MBR Bootkit for Windows☆54Updated 3 years ago
- ☆23Updated 2 years ago
- a windows kernel keylogger that works☆21Updated last year
- bootkit驱动映射,三环进程注入加载指定模块☆14Updated last year
- Easy to include string and wstring obfuscation☆21Updated 3 years ago
- What makes it page☆17Updated 3 years ago
- Enum and Remove Hook in Windows☆46Updated last week
- The modifyed cjson that can running on windows kernel☆14Updated 2 years ago
- Based on minhook☆34Updated 2 years ago