codereversing / undocumented_veh
Reverse engineering AddVectoredExceptionHandler
☆3Updated 2 years ago
Alternatives and similar repositories for undocumented_veh
Users that are interested in undocumented_veh are comparing it to the libraries listed below
Sorting:
- Hooking functions with structured and vectored exception handling☆8Updated 2 years ago
- Perform remote calls in x64☆7Updated 2 years ago
- Enumerate process modules manually☆9Updated 2 years ago
- PoC of BOOST-ed _EPROCESS.VadRoot iterating☆25Updated 10 years ago
- just an lite AntiRootkit for interesting☆23Updated 9 years ago
- Sample debugger for x86 and x64☆4Updated 2 years ago
- Call undocumented native functions in the windows kernel☆5Updated 2 years ago
- Hooking functions with guard pages☆9Updated 2 years ago
- User-mode program parsing logs created by HyperPlatform☆18Updated 8 years ago
- Shareds for kernel developement☆28Updated 11 years ago
- ☆14Updated 7 years ago
- ☆13Updated 7 years ago
- PIN Tool for monitoring calls and writes from obfuscated code.☆26Updated 5 years ago
- ☆13Updated 9 years ago
- Extremely minimal linear/recursive disassembler example☆12Updated 2 years ago
- reverse win7 32bit hotpatch implement☆9Updated 11 years ago
- MIR-Engine☆24Updated 7 years ago
- Wow64 syscall hook☆40Updated 7 years ago
- Lists work items being queued currently.☆14Updated 9 years ago
- Hook APIs and send data back to another process with Google Protobufs☆2Updated 2 years ago
- Some of example code that I have collected while learning☆10Updated 8 years ago
- Run one process as another under Windows☆11Updated 2 years ago
- ☆23Updated 7 years ago
- viewing page boundaries of pages with PAGE_NOACCESS protection reveals the presence of x64dbg.☆23Updated 8 years ago
- Hooking vtables☆10Updated 2 years ago
- Spoof Windows Test Signing Mode☆29Updated 6 years ago
- windows kernel File redirection☆20Updated 10 years ago
- ☆17Updated 8 years ago
- Hidden module/dll detector for windows apps☆15Updated 7 years ago
- A driverless driver that is supposed to be manually mapped, usually by using TDL exploit. The driver shows how to read/write to any proce…☆21Updated 7 years ago