XShar / Windows_Kernel_ProgrammingLinks
Windows Kernel Programming (Обзорный перевод книги)
☆58Updated 4 years ago
Alternatives and similar repositories for Windows_Kernel_Programming
Users that are interested in Windows_Kernel_Programming are comparing it to the libraries listed below
Sorting:
- An example of how x64 kernel shellcode can dynamically find and use APIs☆106Updated 5 years ago
- Retrieve pointers to undocumented kernel functions and offsets to members within undocumented structures to use in your driver by using t…☆63Updated 6 years ago
- This utility allows you to lock every available memory regions of an arbitrary process into its working set.☆69Updated 2 years ago
- Скрытие строки от отладчиков и декомпиляторов☆51Updated 5 years ago
- win10 pgContext dynamic dump (btc version)☆107Updated 5 years ago
- obfacros - a set of C++ macros that can be used to obfuscate your c/c++ code, to make executables harder for reverse-engineering.☆46Updated 6 years ago
- ☆20Updated 8 years ago
- All Nt Syscall and W32k Syscall in one asm, include, and call it!☆58Updated 3 years ago
- LSASS INJECTOR☆35Updated 6 years ago
- A static analysis tool that helps security researchers scan a list of Windows kernel drivers for common vulnerability patterns in drivers…☆69Updated 3 years ago
- virtualization obfuscator inspired by juhajong/vm-obfuscator☆57Updated 5 years ago
- Call 32bit NtDLL API directly from WoW64 Layer☆60Updated 4 years ago
- Sample project for kernel debugging automation with Vagrant☆60Updated 5 years ago
- Hooking the GDT - Installing a Call Gate. POC for Rootkit Arsenal Book Second Edition (version 2022)☆73Updated 2 years ago
- Obfuscate calls to imports by patching in stubs☆70Updated 4 years ago
- This is a simple driver with x64 inline assembly☆57Updated 5 years ago
- Rootkit & Anti-rootkit☆41Updated last year
- Multi-purpose proof-of-concept tool based on CPU-Z CVE-2017-15303☆110Updated 7 years ago
- Resolve DOS MZ executable symbols at runtime☆95Updated 3 years ago
- ☆59Updated 3 years ago
- arbitrary kernel read/write in dbutil_2_3.sys, Proof of Concept Local Privilege Escalation to nt authority/system☆57Updated 3 years ago
- 大表哥的Syscall-Monitor☆34Updated 6 years ago
- Helper script for Windows kernel debugging with IDA Pro on native Bochs debugger (including PDB symbols)☆62Updated 2 years ago
- fix vmprotect import function used unicorn-engine.☆96Updated 2 years ago
- Anti-Debug encyclopedia contains methods used by malware to verify if they are executed under debugging. It includes the description of v…☆61Updated last year
- x64 syscall caller in C++.☆91Updated 7 years ago
- Kernel shellcode injector☆144Updated 4 years ago
- ☆47Updated 5 years ago
- Takes a Windbg dumped structure (using the 'dt' command) and formats it into a C structure☆36Updated last year
- PoC for hiding PE exports☆67Updated 4 years ago