PoC demonstrating the usage of undocumented Process Instrumentation Callback for intercepting kernel-to-user transitions (Syscalls, APCs, Exceptions).
☆39Nov 28, 2025Updated 11 months ago
Alternatives and similar repositories for windows_instrumentation_callback
Users that are interested in windows_instrumentation_callback are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- A lightweight, header-only C++ library for registering and handling custom URL schemes (deep links) on Windows.☆21Jun 9, 2025Updated last year
- Universal signature generation for any system function from all Windows Builds using Winbindex☆18Dec 11, 2025Updated 10 months ago
- A modern, mostly zero-allocation C++23 library for working with low-level Windows within user-space. Iteration over loaded modules via PE…☆271Updated this week
- A modern C++20 header-only library for advanced direct system call invocation.☆184Sep 5, 2026Updated 2 months ago
- Improved VMP Idea(detect anti-anti-debug tools by bug)☆51Jun 7, 2023Updated 3 years ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- Another ( there are few ) repository with FLIRT signatures☆27Aug 11, 2024Updated 2 years ago
- Automatic vtable detection, inheritance analysis, and function override tracking for reverse engineering compiled C++ binaries. Supports …☆150Mar 13, 2026Updated 7 months ago
- Code proving a 25-year blind spot in all disassemblers. PoC for Intel x64/x86 “ghost instructions.”☆129Nov 2, 2025Updated last year
- Detect suspend you process☆15Jun 7, 2023Updated 3 years ago
- Hooking Windows' exception dispatcher to protect process's PML4☆277Jan 24, 2025Updated last year
- This project demonstrating multiple protection and anti-analysis techniques, including self-modifying code.☆16Oct 9, 2023Updated 3 years ago
- An x86-64 Code Virtualizer☆329Sep 26, 2024Updated 2 years ago
- x86-x64 Packer with Portable Executable compatibility.☆137Aug 21, 2026Updated 2 months ago
- Windows Kernel Http Library☆19Mar 9, 2026Updated 7 months ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- ☆13Aug 6, 2020Updated 6 years ago
- ADSIsearch is a Beacon Object File (BOF) to query Active Directory using ADDS, ADSI, and Network Management WinAPIs.☆10Feb 23, 2025Updated last year
- BOF to manage Active Directory Integrated DNS (ADIDNS)☆28Jul 28, 2025Updated last year
- modern c++ wrapper around the microsoft portable executable file format☆43Nov 22, 2025Updated 11 months ago
- PAGE_GUARD based hooking library☆53Jul 25, 2022Updated 4 years ago
- Havoc Professional backend plugin to allow ingesting of events and logs to Ghostwriter☆16Feb 25, 2026Updated 8 months ago
- A minimal VT-x hypervisor for Intel without EPT support.☆26Jul 21, 2026Updated 3 months ago
- Cobalt Strike BOF to obtain location data☆30Jul 4, 2026Updated 4 months ago
- 渗透测试人员可以通过此BOF，将非托管 Windows可执行文件加载到Beacon内存中并执行它们，检索输出并将其呈现在 Beacon 控制台中☆13Mar 18, 2025Updated last year
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- Kernel Process Termination Tool ( CVE-2026-0828 exploit)☆38Apr 2, 2026Updated 7 months ago
- A credential extraction BOF for Veeam Backup and Replication and Veeam One☆82Sep 16, 2026Updated last month
- Public Release☆16Mar 27, 2019Updated 7 years ago
- ReClassEx with dark theme and improvements☆30Apr 24, 2026Updated 6 months ago
- Async BOF for NTLMv2 Hash Snooping from ETW☆13Apr 2, 2026Updated 7 months ago
- D3D11 Hook with ImGui integration (x86 / x64) - Make D3D11 internal menu with ImGui (Resize & Fullscreen support)☆35Aug 22, 2023Updated 3 years ago
- Prime a process for injection when S1 is present☆13Feb 8, 2025Updated last year
- ☆12Feb 26, 2025Updated last year
- Tool to dump EFI runtime drivers.☆37Feb 23, 2024Updated 2 years ago
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- Shellcode capable of bypassing EAF / IAF mitigations☆29Apr 11, 2023Updated 3 years ago
- ☆32Apr 2, 2026Updated 7 months ago
- comptime-only interpreter☆15Mar 10, 2026Updated 7 months ago
- Obfusk8: lightweight Obfuscation library based on C++17 / Header Only for windows binaries☆842Jun 25, 2026Updated 4 months ago
- Using NtCreateFile and NtDeviceIoControlFile to realize the function of winsock（利用NtCreateFile和NtDeviceIoControlFile 实现winsock的功能）☆128Sep 9, 2022Updated 4 years ago
- ☆47Sep 1, 2026Updated 2 months ago
- ☆10May 26, 2026Updated 5 months ago