Whitebird0 / Windows-kernel-learning-notesLinks
☆18Updated 3 years ago
Alternatives and similar repositories for Windows-kernel-learning-notes
Users that are interested in Windows-kernel-learning-notes are comparing it to the libraries listed below
Sorting:
- 一个windows内核驱动分析框架,对内核所有导出函数进行挂钩监控☆52Updated last month
- 《Windows 内核安全编程技术实践》 系列丛书,探索 Anti RootKit 反内核工具核心原理与技术实现细节。☆61Updated 2 years ago
- 使用 Intel 虚拟化特性实现应用层HOOK☆61Updated 4 months ago
- 大数字驱动逆向代码☆71Updated last year
- https://key08.com/index.php/2021/10/19/1375.html☆68Updated 3 years ago
- Exploit vulnerabilities in NeacSafe64.sys to achieve privilege escalation and kernel-mode shellcode execution☆10Updated 2 months ago
- about how to make a anti-virus engine☆73Updated last month
- 利用物理内存映射,实现虚拟内存的伪隐藏☆83Updated 2 years ago
- ida提取特征码脚本☆56Updated 5 years ago
- windwos内核研究与驱动Code☆64Updated 3 years ago
- Hook NtDeviceIoControlFile with PatchGuard☆107Updated 3 years ago
- Win7内核私有符号结构转储☆68Updated 3 years ago
- sc4cpp is a shellcode framework based on C++☆90Updated 3 years ago
- IDA Python script for generating Windows x86 shellcode with one click☆37Updated last year
- VT Hook☆45Updated 11 months ago
- 滴水中级内核学习☆31Updated 2 years ago
- 非编译时代码混淆,包括代码块拆分、代码乱序、常量加密、代码变异、抹除jcc、局部混淆等,主要提供框架以及思路☆31Updated 2 years ago
- 针对windows rootkit的一些检测,分别从进程、端口、文件这三个方面进行检测。☆19Updated 5 months ago
- 收集常用windows版本内核文件☆33Updated last year
- Enum and Remove Hook in Windows☆39Updated this week
- 一款64位Exe程序动态追踪执行流程以及保存信息的工具☆48Updated 7 months ago
- ☆53Updated 2 years ago
- ☆27Updated last year
- 🖱2021腾讯游戏安全技术竞赛-机器学习 4th☆11Updated 4 years ago
- A poc of embedding x64 code into x86 PE file☆19Updated 5 years ago
- Call NtCreateUserProcess directly as normal.☆71Updated 3 years ago
- Free(or force?)file and delete it☆12Updated 6 years ago
- win32kbase!NtDCompositionCommitSynchronizationObject and win32kbase!NtGdiGetCertificate☆16Updated 3 years ago
- Heaven's Gate implementation in C for constructing x64 Win32 API call in x86 WoW64 processes.☆71Updated 3 years ago
- 保护进程☆23Updated 2 years ago