Rhydon1337 / windows-kernel-process-killer
Force kill a process using windows kernel driver
☆24Updated 3 years ago
Alternatives and similar repositories for windows-kernel-process-killer:
Users that are interested in windows-kernel-process-killer are comparing it to the libraries listed below
- Setup for windows kernel development (development, debugging automation and compiling)☆15Updated 4 years ago
- Force a file delete using a windows kernel driver☆64Updated 2 years ago
- Protect a process from code injection, termination and hooking☆47Updated 3 years ago
- Protect a file from being deleted using windows kernel file system minifilter driver☆37Updated 3 years ago
- UnknownField is a tool based clang that obfuscating the order of fields to protect your C/C++ game or code.☆44Updated 2 years ago
- Hiding SSH public keys in SSH server using a kernel agent☆20Updated 4 years ago
- ntoskrnl .data hooks for UM-KM communication☆38Updated 10 months ago
- silence file system monitoring components by hooking their minifilters☆56Updated last year
- A method to Disable DSE using .data ptr hooks☆29Updated last year
- clearing traces of a loaded driver☆47Updated 2 years ago
- 将驱动映射到会话空间☆34Updated 2 years ago
- ☆10Updated 2 years ago
- A native Windows library for intercepting kernel-to-user transitions using instrumentation callbacks☆17Updated last year
- ☆31Updated 4 years ago
- Based on minhook☆30Updated last year
- windows kernel pagehook☆39Updated 2 years ago
- ☆69Updated 3 years ago
- A poc that abuses Enclave☆37Updated 2 years ago
- Patches DSE by swapping both data ptrs located in SeValidateImageHeader && SeValidateImageData☆18Updated last year
- ☆29Updated 6 months ago
- This project can bypass most of the AC except for some perverts that enable VT to monitor page tables☆40Updated 10 months ago
- Only for Stress-Testing☆24Updated 2 years ago
- ☆16Updated 2 years ago
- Hook NtDeviceIoControlFile with PatchGuard☆105Updated 2 years ago
- A basic demonstration of directly overwriting paging structures for physical memory r/w and interprocess memory copy☆84Updated last year
- 不使用3环挂钩进行DWM桌面绘制☆79Updated 3 years ago
- Allows for same-file KernelMode function execution using Encrypted addresses of Functions☆32Updated 5 months ago
- using wnbios64.sys for arbitrary r/w☆13Updated 10 months ago
- A series of methods used to detect kernel shellcode for tencent game safe race 2024☆36Updated 11 months ago
- CVE-2022-3699 with arbitrary kernel code execution capability☆69Updated 2 years ago