MustafaNafizDurukan / WindowsKernelDriversLibraryLinks
Collection of Windows kernel driver examples, offering insights into Windows internals, rootkit evasion, and advanced driver development.
☆11Updated last year
Alternatives and similar repositories for WindowsKernelDriversLibrary
Users that are interested in WindowsKernelDriversLibrary are comparing it to the libraries listed below
Sorting:
- Compile-Time Calls Obfuscator for C++14+☆48Updated last year
- Rookit and anti rookit on Windows platform☆13Updated last year
- ☆26Updated 6 years ago
- Windows 10/11 unsigned kernel driver load/debugging☆14Updated 2 years ago
- Force a file delete using a windows kernel driver☆71Updated 3 years ago
- windows rootkit☆61Updated last year
- Compile-Time Strings and Numbers Encryption for C++20☆54Updated 9 months ago
- PsSetCreateProcessNotifyRoutine/Ex/Ex2 hook☆12Updated last year
- Executes Read/Write process memory with `NtQueryCompositionSurfaceStatistics`☆19Updated last year
- Reimplement CreateProcessInternalW via Windows 10 20H1+/Windows 11 Base on NtCreateUserProcess-Post☆73Updated last year
- bootkit驱动映射,三环进程注入加载指定模块☆14Updated last year
- Reverse Socks5 proxy for windows☆15Updated 3 years ago
- 内存加载DLL 支持VMP最大加密☆11Updated 5 years ago
- silence file system monitoring components by hooking their minifilters☆58Updated last year
- Bring Your Own Vulnerable Driver for PatchGuard & Driver Signature Enforcement☆13Updated last year
- Hook NtDeviceIoControlFile with PatchGuard☆107Updated 3 years ago
- Compact MBR Bootkit for Windows☆54Updated 3 years ago
- CVE-2022-3699 with arbitrary kernel code execution capability☆70Updated 2 years ago
- Helper functions for calculating the authenticode digest for a portable executable file☆21Updated 5 years ago
- Protect a process from code injection, termination and hooking☆49Updated 4 years ago
- The modifyed cjson that can running on windows kernel☆14Updated 2 years ago
- A x64 PE Packer/Protector Developed in C++ and VisualStudio☆54Updated 2 years ago
- research revolving the windows filtering platform callout mechanism☆35Updated last year
- Using ioctl major function swaps to "spoof" the ARP table☆15Updated last year
- Exploits Intel's signed iqvw64e.sys driver to allow manual mapping and read/writing of memory at a kernel level.☆13Updated 6 years ago
- ☆32Updated 4 years ago
- windows kernelmode driver to inject dll into each and every process and perform systemwide function hooking☆53Updated 3 years ago
- Windows API Call Obfuscation☆108Updated 2 years ago
- Patches DSE by swapping both data ptrs located in SeValidateImageHeader && SeValidateImageData☆21Updated last year
- filter driver to hide files and directories☆22Updated last year