Code Integrity Violation Spotter
☆17Jun 11, 2024Updated 2 years ago
Alternatives and similar repositories for CISpotter
Users that are interested in CISpotter are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- ☆17Oct 31, 2022Updated 3 years ago
- ☆46Oct 7, 2018Updated 7 years ago
- Demo to show how write ALPC Client & Server using native Ntdll.dll syscalls.☆21Jan 25, 2022Updated 4 years ago
- Some drivers I've written while solving exercises from Practical Reverse Engineering☆15Jan 9, 2022Updated 4 years ago
- Hooking Heavens Gate in a weekend☆13Jan 1, 2022Updated 4 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- ☆10Apr 19, 2026Updated 3 months ago
- Some crazy PE executables protection kernel driver☆20May 2, 2020Updated 6 years ago
- Hijack NotifyRoutine for a kernelmode thread☆38Jun 4, 2022Updated 4 years ago
- Walks the Process' VAD list to grab the PTE's corresponding to a usermode virtual address, all to get the physical address☆23Nov 22, 2021Updated 4 years ago
- R3劫持所有异常☆14Jan 4, 2021Updated 5 years ago
- Example of making debugger using Hardware Breakpoint + VEH☆18May 13, 2021Updated 5 years ago
- ☆130Oct 14, 2022Updated 3 years ago
- Experiment to use sections as User/Kernelmode comm vector☆22Apr 7, 2023Updated 3 years ago
- kernel-mode TDI client which can send and receive HTTP requests☆56Jun 9, 2018Updated 8 years ago
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- a simple intel vt code both support x86 & x64. PatchGuard monitor.☆76Oct 28, 2021Updated 4 years ago
- A collection of tools, source code, and papers researching Windows' implementation of CET.☆94Oct 6, 2020Updated 5 years ago
- ☆35Oct 18, 2022Updated 3 years ago
- Windows system repair tool☆18Jun 2, 2021Updated 5 years ago
- PoC of BOOST-ed _EPROCESS.VadRoot iterating☆27May 21, 2014Updated 12 years ago
- Windows internals and exploitation tricks☆118Mar 28, 2026Updated 4 months ago
- ☆33Dec 22, 2020Updated 5 years ago
- This is my implementation of IA32 Call Gates used for ring transitioning. (e.g ring 1 or ring 2)☆17Jan 15, 2019Updated 7 years ago
- ☆32Dec 5, 2024Updated last year
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- NT AUTHORITY\SYSTEM☆43Jul 8, 2020Updated 6 years ago
- Documenting system information classes and their uses☆55Oct 18, 2021Updated 4 years ago
- ☆26Sep 29, 2022Updated 3 years ago
- first commit☆66Oct 29, 2020Updated 5 years ago
- A POC for Windows Extension Host hooking☆24Jul 13, 2019Updated 7 years ago
- NASM listing to shellcode converter☆14May 6, 2018Updated 8 years ago
- A VMBR (Virtual-Machine Based Rootkit) which runs a guest OS and sends the attacker its data☆28Apr 27, 2024Updated 2 years ago
- A simple present scene, kernel allocation injector.☆27Jun 12, 2022Updated 4 years ago
- Windbg extension that allows you analyze Control Flow Guard map☆39Oct 7, 2021Updated 4 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- PsSetCreateProcessNotifyRoutine/Ex/Ex2 hook☆13May 30, 2024Updated 2 years ago
- Driver Loader/BE Bypass/Win Malware(lol)☆35Jun 25, 2019Updated 7 years ago
- ☆30Aug 14, 2023Updated 2 years ago
- Detects if a Kernel mode debugger is active by reading the value of KUSER_SHARED_DATA.KdDebuggerEnabled. It is a high level and portable …☆25Sep 18, 2017Updated 8 years ago
- ☆14Mar 13, 2023Updated 3 years ago
- Some eternal WIP stuff :)☆21Nov 18, 2025Updated 8 months ago
- Call 32bit NtDLL API directly from WoW64 Layer☆61Nov 18, 2020Updated 5 years ago