Hijack NotifyRoutine for a kernelmode thread
☆39Jun 4, 2022Updated 4 years ago
Alternatives and similar repositories for NotifyRoutineHijackThread
Users that are interested in NotifyRoutineHijackThread are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- base for testing☆201Sep 28, 2024Updated 2 years ago
- ☆156May 21, 2024Updated 2 years ago
- Illustrates the concept of return address spoofing, and how it is used.☆14May 13, 2020Updated 6 years ago
- Mapping your code on a 0x1000 size page☆70May 20, 2022Updated 4 years ago
- Old way for blocking NMI interrupts☆30Sep 6, 2022Updated 4 years ago
- Deploy open-source AI quickly and easily - Special Bonus Offer • AdRunpod Hub is built for open source. One-click deployment and autoscaling endpoints without provisioning your own infrastructure.
- Just another .data pointer hook. This time it's hooking AfdIrpCallDispatch within Afd.sys☆11Feb 22, 2022Updated 4 years ago
- Two PoC of accessing process virtual memory via NT Kernel☆21Jun 25, 2021Updated 5 years ago
- ☆18Dec 18, 2020Updated 5 years ago
- ☆19May 17, 2022Updated 4 years ago
- Experiment to use sections as User/Kernelmode comm vector☆22Apr 7, 2023Updated 3 years ago
- A simple way to spoof return addresses using an exception handler☆43Aug 3, 2022Updated 4 years ago
- ☆40Mar 23, 2023Updated 3 years ago
- Bypasses for Windows kernel callbacks PatchGuard protection☆44Aug 15, 2021Updated 5 years ago
- ☆191Dec 8, 2021Updated 4 years ago
- Bare Metal GPUs on DigitalOcean Gradient AI • AdPurpose-built for serious AI teams training foundational models, running large-scale inference, and pushing the boundaries of what's possible.
- This project will give you an example how you can hook a kernel vtable function that cannot be directly called☆81Dec 25, 2021Updated 4 years ago
- Code Integrity Violation Spotter☆17Jun 11, 2024Updated 2 years ago
- Walks the Process' VAD list to grab the PTE's corresponding to a usermode virtual address, all to get the physical address☆23Nov 22, 2021Updated 4 years ago
- Load your driver like win32k.sys☆258Aug 20, 2022Updated 4 years ago
- POC Hook of nt!HvcallCodeVa☆54May 8, 2023Updated 3 years ago
- State of the art DLL injector that took 20 minutes to make☆232Aug 16, 2023Updated 3 years ago
- A kernel module dumper for Windows x64 using mhyprot vulnerable driver☆38Oct 26, 2020Updated 6 years ago
- ☆15Jun 20, 2022Updated 4 years ago
- ☆82Aug 17, 2021Updated 5 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Patches DSE by swapping both data ptrs located in SeValidateImageHeader && SeValidateImageData☆26Feb 9, 2024Updated 2 years ago
- Demo to show how write ALPC Client & Server using native Ntdll.dll syscalls.☆21Jan 25, 2022Updated 4 years ago
- ☆137Aug 6, 2022Updated 4 years ago
- ☆10May 1, 2022Updated 4 years ago
- Mono process injector☆21Jan 26, 2019Updated 7 years ago
- A kernelmode driver swapping a .data pointer in the kernel to perform communication between the kernel and usermode.☆134Oct 20, 2020Updated 6 years ago
- ☆68Aug 31, 2021Updated 5 years ago
- Hiding a system thread against conventional means of detection☆41Oct 7, 2020Updated 6 years ago
- Reverse Engineering a signed kernel driver packed and virtualized with VMProtect 3.6☆110Mar 16, 2026Updated 7 months ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- ☆149Jan 24, 2024Updated 2 years ago
- Recursive and arbitrary code execution at kernel-level without a system thread creation☆159Mar 16, 2026Updated 7 months ago
- Hook NtDeviceIoControlFile with PatchGuard☆103May 10, 2022Updated 4 years ago
- Some drivers I've written while solving exercises from Practical Reverse Engineering☆15Jan 9, 2022Updated 4 years ago
- A simple MmCopyMemory hook.☆38Jul 11, 2022Updated 4 years ago
- ☆117Aug 7, 2022Updated 4 years ago
- Calling "own" MouseClassServiceCallback☆75Jul 28, 2022Updated 4 years ago