christianshub / process-injection-guard
Signature scanner and API hooks to detect malicious process injection
☆27Updated 2 years ago
Alternatives and similar repositories for process-injection-guard:
Users that are interested in process-injection-guard are comparing it to the libraries listed below
- Debug Print viewer (user and kernel)☆66Updated last year
- A class to gather information about a process, its threads and modules.☆24Updated 5 years ago
- A Windows API hooking library !☆31Updated 2 years ago
- UnknownField is a tool based clang that obfuscating the order of fields to protect your C/C++ game or code.☆44Updated 2 years ago
- Bypassing kernel patch protection runtime☆20Updated 2 years ago
- Analysing and defeating PatchGuard universally☆34Updated 4 years ago
- Static Library For Windows Drivers☆33Updated 2 months ago
- Elevate arbitrary MSR writes to kernel execution.☆33Updated last year
- Process Creation, Image Load and Thread Creation Notification☆12Updated last year
- Example of hijacking system calls via function pointer tables☆31Updated 3 years ago
- Sample for Creating a new kernel object type and supporting API☆24Updated 7 months ago
- Simplifies the Windows Kernel APIs by making the existing function easier to use, and extends them by creating functions that could possi…☆26Updated 3 weeks ago
- ☆31Updated 4 years ago
- A packed & protected Module Loader and more, for 64-bit Windows☆29Updated 4 years ago
- Function hooks in Windows NT Kernel☆22Updated 4 years ago
- A reflexive driver loader to bypass Windows DSE (featuring a custom PE loader)☆41Updated 6 years ago
- Native API header files for the Process Hacker project (nightly).☆26Updated this week
- ☆48Updated 6 years ago
- Remote memory library in C++17.☆31Updated 6 years ago
- This is a POC Test project for INTEL CPUs on blocking NMI Entries through the IDT Handler.☆44Updated 6 months ago
- Small class to parse debug info from PEs, download their respective PDBs from the Microsoft Public Symbol Server and calculate RVAs of fu…☆44Updated 2 years ago
- Small memory leak PoC that is happening in IopGetDeviceInterfaces☆25Updated 4 years ago
- SetWinEventHook Sample☆47Updated last year
- A poc that abuses Enclave☆38Updated 2 years ago
- X86/X64 Hardware Breakpoint Manager☆41Updated 3 years ago
- Driver shared section communication☆46Updated last month
- c++ implementation of windows heavens gate☆68Updated 4 years ago
- Protect a process from code injection, termination and hooking☆46Updated 3 years ago
- ☆46Updated 4 months ago
- Stealthy Injector that leverages a vulnerable driver and other exploits to remain undetected☆36Updated 6 years ago