Windows X64 mode use seh in manual mapped dll or manual mapped sys
☆77Oct 10, 2022Updated 3 years ago
Alternatives and similar repositories for sehcall
Users that are interested in sehcall are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Kernel dwm render☆173Oct 10, 2023Updated 2 years ago
- 从MmPfnData中枚举进程和页目录基址☆215Aug 18, 2023Updated 2 years ago
- ☆75Aug 31, 2022Updated 3 years ago
- ☆188May 20, 2022Updated 4 years ago
- ☆143Dec 10, 2022Updated 3 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- 不使用3环挂钩进行DWM桌面绘制☆82Dec 9, 2021Updated 4 years ago
- Hook NtDeviceIoControlFile with PatchGuard☆106May 10, 2022Updated 4 years ago
- 利用物理内存映射，实现虚拟内存的伪隐藏☆85Sep 15, 2022Updated 3 years ago
- Use GDI in KernelMode☆27Oct 1, 2022Updated 3 years ago
- ☆19Jun 13, 2022Updated 4 years ago
- Drawing from kernelmode without any hooks☆177Jul 7, 2022Updated 3 years ago
- 巨硬☆17Oct 4, 2023Updated 2 years ago
- ☆194May 1, 2023Updated 3 years ago
- ☆228Mar 11, 2023Updated 3 years ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- Hide codes/data in the kernel address space.☆187May 8, 2021Updated 5 years ago
- A Memory Read And Write the Hide Driver☆70Dec 2, 2020Updated 5 years ago
- Walks through the 4-level paging structures in Windows x64☆14Feb 12, 2023Updated 3 years ago
- IO隐藏通信封装☆17May 31, 2021Updated 5 years ago
- a Windows kernel Pdb parsing and downloading library that running purely in kernel mode without any R3 programs.☆180Sep 13, 2024Updated last year
- Execute anything in a legit memory region by attacking a windows driver☆20Aug 20, 2023Updated 2 years ago
- Static user/kernel mode library that allows access to all functions and global variables by extracting offsets from the PDB☆128May 29, 2025Updated last year
- ☆14Dec 3, 2022Updated 3 years ago
- Archive R/W into any protected process by changing the value of KTHREAD->PreviousMode☆161Jul 31, 2022Updated 3 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- A very simple C++ library for download pdb, get rva of function, global variable and offset from struct.☆162Mar 26, 2024Updated 2 years ago
- 可在非测试模式下符号化读取内核内存。Kernel memory can be read symbolically in non test mode。☆108Sep 1, 2022Updated 3 years ago
- ShotHv☆158Mar 8, 2022Updated 4 years ago
- ☆102Oct 6, 2023Updated 2 years ago
- Not mine, just saved☆13Nov 12, 2023Updated 2 years ago
- ☆160May 21, 2024Updated 2 years ago
- ☆173Mar 9, 2022Updated 4 years ago
- Manual mapper that uses PTE manipulation, Virtual Address Descriptor (VAD) manipulation, and forceful memory allocation to hide executabl…☆410Jan 29, 2022Updated 4 years ago
- r/w virtual memory without attach☆230Oct 19, 2023Updated 2 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Windows CIFS/SMB packet generation and SMB networking library☆12Aug 25, 2020Updated 5 years ago
- a dkom rootkit that targets windows x64 systems. the rootkit hooks and edits criticl memory sections in order to hide different resources…☆19Jul 5, 2023Updated 2 years ago
- ☆229Feb 21, 2023Updated 3 years ago
- 隐藏可执行内存☆274Apr 27, 2025Updated last year
- The program draws with win32k gdi functions in the kernel while NtGdiDdDDISubmitCommand is being hooked.☆352Apr 27, 2020Updated 6 years ago
- Some psuedo snippets from BattlEye's BEDaisy.sys loaded on Rainbow Six: Siege.☆135Apr 23, 2022Updated 4 years ago
- mouseclassservicecallback detection via hook☆54Feb 7, 2022Updated 4 years ago