Minimalistic HTTP(S) client for the NT kernel
☆61Dec 1, 2025Updated 11 months ago
Alternatives and similar repositories for khttpdrv
Users that are interested in khttpdrv are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- .data ptr swapper for newer win32k versions. (Supports Windows 11)☆38Jan 19, 2026Updated 9 months ago
- A simple POC to show how to chain multiple callbacks via tail calls to artificially construct a call stack☆114May 25, 2026Updated 5 months ago
- ☆59Jun 10, 2026Updated 4 months ago
- A basic implementation of Patch Guard that I implemented, that includes integrity checks and other protection mechanisms I added.☆79Sep 26, 2026Updated last month
- "Bypassing" HVCI via donor PFN swaps to modify read-only code pages. Call chained kernel functions (kCET and SLAT support), and more.☆151Mar 16, 2026Updated 7 months ago
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- Busybox-style Beacon Object Files for *nix post-exploitation. Reimplements common Unix utilities as BOFs for use in stripped environments…☆84Aug 22, 2026Updated 2 months ago
- Using NtCreateFile and NtDeviceIoControlFile to realize the function of winsock（利用NtCreateFile和NtDeviceIoControlFile 实现winsock的功能）☆128Sep 9, 2022Updated 4 years ago
- Intel 64/Windows low-level experiments☆119Sep 16, 2026Updated last month
- Linux Process Injection via Seccomp Notifier☆97Dec 9, 2025Updated 10 months ago
- Async BOF for NTLMv2 Hash Snooping from ETW☆13Apr 2, 2026Updated 7 months ago
- tests to catch some sloppy hv impls☆37Mar 16, 2026Updated 7 months ago
- Create stealthy, inline, EPT-like hooks using SMAP and SMEP☆69Oct 19, 2024Updated 2 years ago
- arm64 linux position-independent shellcode framework☆32Dec 12, 2025Updated 10 months ago
- A cross-platform C++ framework for building Windows shellcode☆180Sep 14, 2026Updated last month
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Proof-of-concept code for understanding the allow-jit entitlement on macOS☆39Feb 19, 2026Updated 8 months ago
- Bring your own Unwind Data Framework☆179Mar 15, 2026Updated 7 months ago
- Windows capability development using GCC and GNU Make☆23Nov 1, 2025Updated last year
- ☆109Oct 25, 2025Updated last year
- Hook syscalls from ring0 without triggering PatchGuard☆33Oct 29, 2025Updated last year
- A runtime for developing large-scale and complex PIC module.☆21Sep 15, 2026Updated last month
- Windows rootkit designed to work with BYOVD exploits☆227Jan 18, 2025Updated last year
- ☆36Jul 14, 2026Updated 3 months ago
- Position-independent Reflective Loader for macOS☆132Feb 19, 2026Updated 8 months ago
- Simple, predictable pricing with DigitalOcean hosting • AdAlways know what you'll pay with monthly caps and flat pricing. Enterprise-grade infrastructure trusted by 600k+ customers.
- Fast covert timing channel communication for inter-process and inter-processor communication on Windows systems.☆78Mar 24, 2026Updated 7 months ago
- Hooking Windows' exception dispatcher to protect process's PML4☆278Jan 24, 2025Updated last year
- A x64 Position Independent Proxy Enumerator Shellcode (PIPES)☆27Nov 14, 2025Updated 11 months ago
- Thats it! An Open-Source Windows UEFI Rootkit☆42Jul 19, 2025Updated last year
- Leaking kernel addresses from ETW consumers. Requires Administrator privileges.☆95Nov 6, 2025Updated last year
- An example of how to use Microsoft Windows Warbird technology☆97Apr 23, 2023Updated 3 years ago
- PPLwindow PPL Bypass via GetProcessHandleFromHwnd☆57Dec 29, 2025Updated 10 months ago
- Ryūjin Protector - Is a Intel Arch - BIN2BIN - PE Obfuscation/Protection/DRM tool☆352Nov 20, 2025Updated 11 months ago
- Toolkits for KPH (KSystemInformer) Dynamic Data .☆35Oct 10, 2026Updated 3 weeks ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Moonwalk++: Simple POC Combining StackMoonwalking and Memory Encryption☆240Dec 17, 2025Updated 10 months ago
- Dumping App Bound Protected Credentials & Cookies Without Privileges.☆171May 28, 2025Updated last year
- Usermode NT Explorer - Query kernel addresses, translate virtual to physical addresses, inspect the PFN database, and more.☆93Mar 16, 2026Updated 7 months ago
- An example reference design for a proposed BOF PE☆251Jan 23, 2026Updated 9 months ago
- Implementation of an export address table protection mitigation, like Export Address Filtering (EAF)☆114May 21, 2023Updated 3 years ago
- Windows kernel driver that detects hypervisors by probing SIDT/LIDT edge cases, paging/TLB behaviors, privilege transitions, and timing e…☆50Mar 3, 2026Updated 8 months ago
- Surgical UNWIND_INFO preservation for sleep masking without call stack spoofing.☆56Mar 30, 2026Updated 7 months ago