SaltedFishBayonet / Windows-Kernel-CryptoLinks
Windows kernel driver encryption library, support base64, aes-256, rsa-2048 and higher, ecc-256, single file, minimal dependence, support R0 and R3
☆22Updated 4 years ago
Alternatives and similar repositories for Windows-Kernel-Crypto
Users that are interested in Windows-Kernel-Crypto are comparing it to the libraries listed below
Sorting:
- silence file system monitoring components by hooking their minifilters☆58Updated last year
- Dynamically generated obfuscated jumps and/or function calls☆38Updated 2 years ago
- Reimplement CreateProcessInternalW via Windows 10 20H1+/Windows 11 Base on NtCreateUserProcess-Post☆75Updated last year
- Protected Process Light Library☆18Updated 5 years ago
- ZeroImport is a lightweight and easy to use C++ library for Windows Kernel Drivers. It allows you to hide any import in your kernel drive…☆48Updated 2 years ago
- c++ implementation of windows heavens gate☆70Updated 4 years ago
- Hook all callbacks which are registered with LdrRegisterDllNotification☆94Updated 8 months ago
- NtCreateUserProcess with CsrClientCallServer for mainstream Windows x64 version☆32Updated last year
- windows rootkit☆60Updated last year
- SoulExtraction is a windows driver library for extracting cert information in windows drivers☆25Updated 2 years ago
- Using c++23 compile-time magic to produce obfuscated PIC strings and arrays.☆30Updated last year
- UnknownField is a tool based clang that obfuscating the order of fields to protect your C/C++ game or code.☆44Updated 2 years ago
- Protect a process from code injection, termination and hooking☆49Updated 4 years ago
- Elevate arbitrary MSR writes to kernel execution.☆41Updated 2 years ago
- A native Windows library for intercepting kernel-to-user transitions using instrumentation callbacks☆25Updated last year
- 以shellcode注入其它驱动执行，躲避驱动签名检测，曾pubg项目中使用，，，当然现在，，，☆26Updated 3 years ago
- Bring Your Own Vulnerable Driver for PatchGuard & Driver Signature Enforcement☆14Updated last year
- Load Dll into Kernel space☆38Updated 3 years ago
- Demonstrate calling a kernel function and handle process creation callback against HVCI☆78Updated 2 years ago
- SetWinEventHook Sample☆50Updated 2 years ago
- windows kernelmode driver to inject dll into each and every process and perform systemwide function hooking☆53Updated 3 years ago
- A poc that abuses Enclave☆40Updated 3 years ago
- X86/X64 Hardware Breakpoint Manager☆42Updated 4 years ago
- Proof-of-Concept software for detecting AV/EDR hooks in Windows libraries.☆33Updated 3 years ago
- Single header library to simplify the usage of direct syscalls. x64/x86☆14Updated 2 years ago
- ☆34Updated 2 years ago
- 2022 Updated Kernelmode-Code☆34Updated last year
- Windows driver template, using C++20 & cmake & GithubActions☆22Updated last year
- ☆26Updated 8 years ago
- Call NtCreateUserProcess directly as normal.☆75Updated 3 years ago