a basic rootkit that use the DKOM to hide a process in user land using its PID and also hide the rootkit Kernel Driver.
☆19Sep 11, 2025Updated last year
Alternatives and similar repositories for RootKitHideProcess
Users that are interested in RootKitHideProcess are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- AMD-V nested hypervisor research driver for Windows: NPT virtualization, NPT hooks, CR3 protection suite, X-deny syscall sensing + behavi…☆17Oct 14, 2026Updated 2 weeks ago
- Blocks PatchGuard routines by intercepting their exceptions through shadow-mapped physical page hooks.☆17Jun 11, 2026Updated 4 months ago
- A simple executable that hides processes from Task Manager by manually mapping itself into it and hooking NtQuerySystemInformation☆36May 25, 2025Updated last year
- Covenant is a collaborative .NET C2 framework for red teamers.☆24Sep 27, 2020Updated 6 years ago
- Displays simulated agent data on an interactable dashboard, including radar, data tables and more.☆16Mar 29, 2026Updated 7 months ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- A C++ Yara Rule Runner☆13Apr 22, 2022Updated 4 years ago
- translate project of Drops☆11May 26, 2016Updated 10 years ago
- Collection of IDA helpers☆16Jul 25, 2022Updated 4 years ago
- Data of Windows Insider builds for Winbindex☆18Updated this week
- Reverse engineering analysis of PureRAT, a multi-stage RAT that executes via msbuild.exe and communicates with C2 servers at pure8s.ddnsf…☆16Sep 21, 2026Updated last month
- Disable DSE and WinTcb (without breaking DRM)☆11Aug 14, 2016Updated 10 years ago
- Windows kernel driver for memory reading operations with userspace communication via IOCTL codes. Supports process memory access, PID res…☆17Jun 30, 2025Updated last year
- Kernel (Ring0) - SSDT unhook driver☆13Feb 22, 2018Updated 8 years ago
- A manual PE mapping implementation, aka reflective loader☆26Feb 28, 2026Updated 8 months ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Example Windows Kernel-mode Driver which finds process ID by executable file name.☆17Nov 23, 2019Updated 6 years ago
- MCP Server for Threat.Zone Holistic Malware Analysis Platform☆14Jul 9, 2025Updated last year
- API Hashing and String Decryption Reverse Engineering Workshop☆20Jul 26, 2023Updated 3 years ago
- Simple PE64 parser in Rust.☆13Jul 4, 2019Updated 7 years ago
- Shellcode execution via x86 inline assembly based on MSVC syntax☆16Apr 26, 2023Updated 3 years ago
- Process Hollowing PoC☆45Feb 22, 2025Updated last year
- Windows kernel framework for legitimate backed memory injection into kernel and user mode.☆48Jun 13, 2026Updated 4 months ago
- Fake Timestamps of Driver Certificates while keeping validity.☆19Jul 15, 2021Updated 5 years ago
- Decoders for 7ev3n ransomware☆17Oct 24, 2016Updated 10 years ago
- Proton VPN Special Offer - Get 70% off • AdSpecial partner offer. Trusted by over 100 million users worldwide. Tested, Approved and Recommended by Experts.
- User Mode Windows Rootkit☆86Jul 14, 2026Updated 3 months ago
- ☆10Sep 19, 2024Updated 2 years ago
- ☆12Feb 26, 2025Updated last year
- C++ Code to Bypass Sandbox and VM via RAM and Core victim info☆10Apr 3, 2023Updated 3 years ago
- 工具☆19Dec 18, 2017Updated 8 years ago
- ⚠️ Malware Development training ⚠️☆45Feb 24, 2025Updated last year
- Rehashing APIs to prevent hash based detection☆14Jan 7, 2025Updated last year
- ☆14Apr 12, 2024Updated 2 years ago
- Windows driver used to read and write memory from kernel space.☆10May 23, 2019Updated 7 years ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- ☆11Sep 28, 2021Updated 5 years ago
- Launch a Windows EXE file with this EXE file (application filter evasion)☆14Mar 10, 2017Updated 9 years ago
- Collection of Windows kernel driver examples, offering insights into Windows internals, rootkit evasion, and advanced driver development.☆13Nov 23, 2023Updated 2 years ago
- A lightweight C client for the Meteomatics Weather API that fetches weather data (temperature, precipitation, and wind speed) using libcu…☆11Oct 24, 2024Updated 2 years ago
- manual mapping injector☆32Sep 28, 2025Updated last year
- A collection of my reverse engineering and malware analysis write-ups☆22Dec 11, 2020Updated 5 years ago
- Patch (block) whatever function you want in a remote process. Adding a ret instruction at the first memory address of this function, the …☆13Jul 11, 2024Updated 2 years ago