gmh5225 / ntoskrnl_file_collectionLinks
Collect various versions of ntoskrnl files
☆55Updated last year
Alternatives and similar repositories for ntoskrnl_file_collection
Users that are interested in ntoskrnl_file_collection are comparing it to the libraries listed below
Sorting:
- ☆125Updated 5 years ago
- Collect different versions of Crucial modules.☆143Updated last year
- ☆65Updated 6 years ago
- This project migrated to https://github.com/backengineering/llvm-msvc☆83Updated last year
- ☆138Updated 2 years ago
- Windows PDB parser for kernel-mode environment.☆98Updated last month
- 收集常用windows版本内核文件☆34Updated last year
- 可在非测试模式下符号化读取内核内存。Kernel memory can be read symbolically in non test mode。☆109Updated 2 years ago
- An example of a client and server using Windows' ALPC functions to send and receive data.☆99Updated 5 months ago
- a monitoring windows driver calls kernel api tools☆104Updated last year
- first commit☆62Updated 4 years ago
- A Hyper-V Hacking Framework For Windows 10 x64 (AMD & Intel)☆71Updated last year
- InfinityHookProMax: Make InfinityHook great great again☆46Updated last year
- windows kernel pagehook☆40Updated 2 years ago
- 🪝 Different aproaches to detecting EPT hooks☆114Updated 3 years ago
- Demystifying PatchGuard is a comprehensive analysis of Microsoft's security feature called PatchGuard, which is designed to prevent unaut…☆125Updated 2 years ago
- Static user/kernel mode library that allows access to all functions and global variables by extracting offsets from the PDB☆98Updated last month
- based on https://github.com/secrary/Hooking-via-InstrumentationCallback☆71Updated 5 years ago
- Tutorial & a blog post that demonstrate how to code a Windows driver to inject a custom DLL into all running processes. I coded it from s…☆135Updated 3 years ago
- a minimalistic windows hypervisor for amd processors☆122Updated 3 years ago
- Use ci.dll API for validating Authenticode signature of files☆145Updated 3 years ago
- Force a file delete using a windows kernel driver☆67Updated 2 years ago
- Use ntdll/ntoskrnl to implement Kernel32, Advapi32 and other APIs. It includes user-mode and kernel-mode.☆88Updated last month
- Ghetto user mode emulation of Windows kernel drivers.☆144Updated 8 months ago
- ☆98Updated 7 years ago
- 让Etwhook再次伟大! Make InfinityHook Great Again!☆138Updated 4 years ago
- Detect-KeAttachProcess by iterating through all processes as well as checking the context of the thread.☆114Updated 3 years ago
- ☆74Updated 2 years ago
- the basic version of the ring0 physical memory read/write tool☆89Updated 5 years ago
- ☆70Updated 3 years ago