cs1ime/sehcall external links

---

GitHub - View repository

GitHub.dev - Open in online code editor

Star history - Growth chart over time

deps.dev - Dependencies and security vulnerabilities

Gitingest - Export source code for LLM usage

Repomix - Export source code for LLM usage

uithub - Export source code for LLM usage

Close

cs1ime/sehcall

Readme badge preview -

If you own this repo, copy the snippet below and add it to your README.md

---

Copy

[![RelatedRepos](https://img.shields.io/badge/related-repos-yellow)](https://relatedrepos.com/gh/cs1ime/sehcall)

Close

cs1ime / sehcallView on GitHubMore

• External links
• Readme badge

Windows X64 mode use seh in manual mapped dll or manual mapped sys

☆80Oct 10, 2022Updated 3 years ago

Alternatives and similar repositories for sehcall

Users that are interested in sehcall are comparing it to the libraries listed below

• cs1ime / KernelDwm

  View on GitHub
  Kernel dwm render
  ☆170Oct 10, 2023Updated 2 years ago
• MapleSwan / enum_real_dirbase

  View on GitHub
  从MmPfnData中枚举进程和页目录基址
  ☆208Aug 18, 2023Updated 2 years ago
• 1401199262 / NMIStackWalk

  View on GitHub
  ☆73Aug 31, 2022Updated 3 years ago
• wbaby / DoubleCallBack

  View on GitHub
  ☆183May 20, 2022Updated 3 years ago
• MapleSwan / PageTableHook

  View on GitHub
  ☆144Dec 10, 2022Updated 3 years ago
• DragonQuestHero / DwmDraw

  View on GitHub
  不使用3环挂钩进行DWM桌面绘制
  ☆83Dec 9, 2021Updated 4 years ago
• cs1ime / DICHook

  View on GitHub
  Hook NtDeviceIoControlFile with PatchGuard
  ☆107May 10, 2022Updated 3 years ago
• A-Normal-User / Pretend_HideVirtualMemory

  View on GitHub
  利用物理内存映射，实现虚拟内存的伪隐藏
  ☆86Sep 15, 2022Updated 3 years ago
• rogxo / KernelDraw

  View on GitHub
  Use GDI in KernelMode
  ☆26Oct 1, 2022Updated 3 years ago
• Dy-Baby / pte-protect

  View on GitHub
  ☆18Jun 13, 2022Updated 3 years ago
• Sentient111 / KernelDrawing

  View on GitHub
  Drawing from kernelmode without any hooks
  ☆174Jul 7, 2022Updated 3 years ago
• xinnie-the-pooh / MS

  View on GitHub
  巨硬
  ☆17Oct 4, 2023Updated 2 years ago
• 1401199262 / RemoteCall

  View on GitHub
  ☆193May 1, 2023Updated 2 years ago
• 1401199262 / Hook-KdTrap

  View on GitHub
  ☆225Mar 11, 2023Updated 3 years ago
• zouxianyu / KernelHiddenExecute

  View on GitHub
  Hide codes/data in the kernel address space.
  ☆188May 8, 2021Updated 4 years ago
• zoand / BOOM

  View on GitHub
  A Memory Read And Write the Hide Driver
  ☆72Dec 2, 2020Updated 5 years ago
• nanabingies / x64-Page-Walker

  View on GitHub
  Walks through the 4-level paging structures in Windows x64
  ☆13Feb 12, 2023Updated 3 years ago
• qq1045551070 / IoCommon

  View on GitHub
  IO隐藏通信封装
  ☆17May 31, 2021Updated 4 years ago
• Oxygen1a1 / oxgenPdb

  View on GitHub
  a Windows kernel Pdb parsing and downloading library that running purely in kernel mode without any R3 programs.
  ☆177Sep 13, 2024Updated last year
• Cesusius / FakeDriver

  View on GitHub
  Execute anything in a legit memory region by attacking a windows driver
  ☆20Aug 20, 2023Updated 2 years ago
• Air14 / SymbolicAccess

  View on GitHub
  Static user/kernel mode library that allows access to all functions and global variables by extracting offsets from the PDB
  ☆118May 29, 2025Updated 9 months ago
• ilovecsad / dwmhook

  View on GitHub
  ☆14Dec 3, 2022Updated 3 years ago
• SamuelTulach / eac_cr3_shuffle

  View on GitHub
  ☆91Oct 6, 2023Updated 2 years ago
• Kwansy98 / EasyPdb

  View on GitHub
  A very simple C++ library for download pdb, get rva of function, global variable and offset from struct.
  ☆159Mar 26, 2024Updated last year
• SamuelTulach / meme-rw

  View on GitHub
  Archive R/W into any protected process by changing the value of KTHREAD->PreviousMode
  ☆162Jul 31, 2022Updated 3 years ago
• IcEy-999 / Ntoskrnl_Viewer

  View on GitHub
  可在非测试模式下符号化读取内核内存。Kernel memory can be read symbolically in non test mode。
  ☆109Sep 1, 2022Updated 3 years ago
• qq1045551070 / ShotHv

  View on GitHub
  ShotHv
  ☆155Mar 8, 2022Updated 4 years ago
• gmh5225 / S4Mapper

  View on GitHub
  Not mine, just saved
  ☆14Nov 12, 2023Updated 2 years ago
• KANKOSHEV / Detect-MouseClassServiceCallback

  View on GitHub
  mouseclassservicecallback detection via hook
  ☆52Feb 7, 2022Updated 4 years ago
• EBalloon / Rw-No-Attach

  View on GitHub
  ☆158May 21, 2024Updated last year
• 1401199262 / MemoryVirtualization

  View on GitHub
  ☆174Mar 9, 2022Updated 4 years ago
• charliewolfe / Stealthy-Kernelmode-Injector

  View on GitHub
  Manual mapper that uses PTE manipulation, Virtual Address Descriptor (VAD) manipulation, and forceful memory allocation to hide executabl…
  ☆387Jan 29, 2022Updated 4 years ago
• rogxo / ReadPhys

  View on GitHub
  r/w virtual memory without attach
  ☆224Oct 19, 2023Updated 2 years ago
• CyberSecurityExploitDevelopment / SMBLibrary

  View on GitHub
  Windows CIFS/SMB packet generation and SMB networking library
  ☆12Aug 25, 2020Updated 5 years ago
• BadPlayer555 / KernelGDIDraw

  View on GitHub
  The program draws with win32k gdi functions in the kernel while NtGdiDdDDISubmitCommand is being hooked.
  ☆346Apr 27, 2020Updated 5 years ago
• liangfei44 / VmWareThrough

  View on GitHub
  ☆225Feb 21, 2023Updated 3 years ago
• smallzhong / hide_execute_memory

  View on GitHub
  隐藏可执行内存
  ☆267Apr 27, 2025Updated 10 months ago
• crtdll / bedaisy-reversal

  View on GitHub
  Some psuedo snippets from BattlEye's BEDaisy.sys loaded on Rainbow Six: Siege.
  ☆132Apr 23, 2022Updated 3 years ago
• IlayTheVuln / Kernelious-Rootkit

  View on GitHub
  a dkom rootkit that targets windows x64 systems. the rootkit hooks and edits criticl memory sections in order to hide different resources…
  ☆19Jul 5, 2023Updated 2 years ago