☆33Dec 22, 2020Updated 5 years ago
Alternatives and similar repositories for FsMinfilterHooking
Users that are interested in FsMinfilterHooking are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- ☆54Jan 9, 2021Updated 5 years ago
- Demo to show how write ALPC Client & Server using native Ntdll.dll syscalls.☆21Jan 25, 2022Updated 4 years ago
- Source files for my posts☆17Jun 20, 2023Updated 3 years ago
- Walks the Process' VAD list to grab the PTE's corresponding to a usermode virtual address, all to get the physical address☆23Nov 22, 2021Updated 4 years ago
- hooking KiUserApcDispatcher☆26Apr 3, 2017Updated 9 years ago
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- A VMBR (Virtual-Machine Based Rootkit) which runs a guest OS and sends the attacker its data☆30Apr 27, 2024Updated 2 years ago
- research revolving the windows filtering platform callout mechanism☆42May 26, 2024Updated 2 years ago
- ☆48Jul 7, 2024Updated 2 years ago
- Data and structures regarding the research done on WdFilter☆12Apr 15, 2020Updated 6 years ago
- a windows kernel keylogger that works☆20Feb 12, 2024Updated 2 years ago
- detect hypervisor with Nmi Callback☆42Sep 25, 2022Updated 4 years ago
- Code Integrity Violation Spotter☆17Jun 11, 2024Updated 2 years ago
- A simple kernel mode driver that hooks some values at the KUSER_SHARED_DATA structure.☆27Jan 7, 2020Updated 6 years ago
- Windows driver template, using C++20 & cmake & GithubActions☆25Aug 9, 2024Updated 2 years ago
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- Ransomware detection application for Windows using Windows Minifilter driver☆93Jun 6, 2020Updated 6 years ago
- NT AUTHORITY\SYSTEM☆43Jul 8, 2020Updated 6 years ago
- all the fun stuff that windows has to offer☆12Jan 23, 2021Updated 5 years ago
- Windows NT port of 'Main is usually a function. So then when is it not?'☆28Mar 11, 2024Updated 2 years ago
- What makes it page☆17Aug 24, 2022Updated 4 years ago
- A research project about Windows notify routines.☆38Jul 31, 2020Updated 6 years ago
- Simple driver loader for windows☆18May 22, 2020Updated 6 years ago
- A driver that hooks C: volume using symbolic link callback to track all FS access to the volume☆108Apr 24, 2020Updated 6 years ago
- A x64 Windows Rootkit using SSDT or Hypervisor hook☆567Jan 4, 2025Updated last year
- Deploy open-source AI quickly and easily - Special Bonus Offer • AdRunpod Hub is built for open source. One-click deployment and autoscaling endpoints without provisioning your own infrastructure.
- Hijack NotifyRoutine for a kernelmode thread☆39Jun 4, 2022Updated 4 years ago
- A MirrorDriver with SharedMemory useing EngMapFile☆23Apr 2, 2020Updated 6 years ago
- Minifilter Callback Patching Proof-of-Concept☆78Oct 31, 2022Updated 4 years ago
- A simple tool for enumerating dynamic endpoints on a DCE/RPC remote or local endpoint mapper.☆16Oct 9, 2020Updated 6 years ago
- ☆46Oct 7, 2018Updated 8 years ago
- UEFI SMM payload mapper with hot reload for on-hardware development☆31Jul 5, 2026Updated 3 months ago
- Shh0ya Kernel Hook Driver☆24Dec 8, 2020Updated 5 years ago
- A collection of cpuid instruction implementations for anti-vm purposes.☆11Oct 5, 2023Updated 3 years ago
- Some drivers I've written while solving exercises from Practical Reverse Engineering☆15Jan 9, 2022Updated 4 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Utility to remove digital code signature from binary PE files in Windows.☆21Apr 25, 2021Updated 5 years ago
- Browse Page Tables on Windows (Page Table Viewer)☆242Apr 2, 2022Updated 4 years ago
- Detects if a Kernel mode debugger is active by reading the value of KUSER_SHARED_DATA.KdDebuggerEnabled. It is a high level and portable …☆25Sep 18, 2017Updated 9 years ago
- Static Library For Windows Drivers☆42Jun 19, 2026Updated 4 months ago
- a simple intel vt code both support x86 & x64. PatchGuard monitor.☆76Oct 28, 2021Updated 5 years ago
- An example code of CiGetCertPublisherName☆15Mar 24, 2022Updated 4 years ago
- silence file system monitoring components by hooking their minifilters☆63Jan 31, 2024Updated 2 years ago