This is a demo project to illustrate the way to verify and restore original SST in case of some malware hooks
☆34Jun 30, 2026Updated 4 months ago
Alternatives and similar repositories for Simple-Antirootkit-SST-Unhooker
Users that are interested in Simple-Antirootkit-SST-Unhooker are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- The project is a demo solution for one of the anti-rootkit techniques aimed on overcoming splicers☆34Mar 13, 2017Updated 9 years ago
- Kernel (Ring0) - SSDT unhook driver☆13Feb 22, 2018Updated 8 years ago
- Final Transparent encrypted version☆14Jan 10, 2017Updated 9 years ago
- hooking KiUserApcDispatcher☆26Apr 3, 2017Updated 9 years ago
- 驱动层拦截web访问源码☆29Apr 2, 2018Updated 8 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- A template programming library for Kernel Mode Windows drivers.☆13Jul 12, 2016Updated 10 years ago
- Protect process fsfilter driver. Windows x64☆36Apr 11, 2016Updated 10 years ago
- Sysark全称system anti-rootkit，是我学习内核写的工具（2013年的代码，后续不会再更新），里面基本上所有的功能都是用内核实现的。这里只是实现了反rootkit部分功能，作为工具的话，本人觉得还欠完善，但作为学习，或有人需要。目前针对的是XP SP2，…☆27Dec 26, 2017Updated 8 years ago
- Formely KMon, a Windows Kernel Driver designed to prevent malware attacks by monitoring the creation of registry keys in common autorun l…☆22Feb 15, 2014Updated 12 years ago
- Hook IDT vector 0xb2 to detect SCI in 64bit windows.☆35Aug 27, 2022Updated 4 years ago
- 粗暴地枚举管理内核的WFP对象。 Manage kernel WFPs in a brutal way.☆24Jan 14, 2018Updated 8 years ago
- A demo solution to illustrate approaches on getting information about processes and block/allow their start☆117Jun 30, 2026Updated 4 months ago
- WinPCAP for NDIS 6.x☆13Jun 24, 2019Updated 7 years ago
- ☆17Mar 3, 2016Updated 10 years ago
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- Minifilter Driver☆15Feb 10, 2017Updated 9 years ago
- Block process execute kernel driver for Windows x64☆19Apr 7, 2016Updated 10 years ago
- a network filter using NDIS hook technique☆19Mar 28, 2013Updated 13 years ago
- A powerful library for inline-hook,lock,compress etc,and it is useful for anti-virus software.☆17Oct 1, 2020Updated 6 years ago
- Simple error lookup for Win32 and NTSTATUS errors☆20Nov 25, 2018Updated 7 years ago
- Obtain remote process cookies by performing a brute-force attack on ntdll.RtlDecodePointer using known pointer encodings.☆22May 31, 2017Updated 9 years ago
- A POC for Windows Extension Host hooking☆25Jul 13, 2019Updated 7 years ago
- Windows过滤驱动-helloworld☆24Aug 27, 2015Updated 11 years ago
- Analyze PatchGuard☆56Aug 19, 2018Updated 8 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Windows Kernel Driver - Create a driver device in TDI layer of windows kernel to capture network data packets☆35Jul 21, 2014Updated 12 years ago
- Listens for Firewall rule match events generated by Microsoft Hyper-V Virtual Filter Protocol (VFP) extension.☆31Jan 26, 2021Updated 5 years ago
- Event Tracing for Windows Custom Events☆21Jan 28, 2015Updated 11 years ago
- Hidden module/dll detector for windows apps☆15May 21, 2017Updated 9 years ago
- 进程内优雅地拦截SPI/LSP模块。 Manage SPI/LSP in a graceful way within private process.☆11Dec 28, 2017Updated 8 years ago
- ☆12Feb 19, 2017Updated 9 years ago
- HAXM hypervisor client☆18Nov 30, 2018Updated 7 years ago
- A-Protect Anti Rootkit Tool☆55Jan 21, 2014Updated 12 years ago
- ☆14Nov 1, 2017Updated 9 years ago
- Deploy open-source AI quickly and easily - Special Bonus Offer • AdRunpod Hub is built for open source. One-click deployment and autoscaling endpoints without provisioning your own infrastructure.
- ☆23Mar 4, 2019Updated 7 years ago
- Windows 64-bits driver☆18Dec 1, 2017Updated 8 years ago
- Plugin for Process Hacker 2 ( https://github.com/processhacker2 ), displays system hooks and able to unhook too.☆56Jan 1, 2018Updated 8 years ago
- Notes my learning steps about Windows-NT☆23May 18, 2017Updated 9 years ago
- L'application pour bloquer un paquet, snipping, analyser le réseau☆11Dec 23, 2016Updated 9 years ago
- network filter driver that control network send speed, based on windows tdi framework.☆30Feb 16, 2024Updated 2 years ago
- 几个UAC Bypass的方法☆12Apr 13, 2018Updated 8 years ago