https://key08.com/index.php/2021/10/19/1375.html
☆70May 11, 2022Updated 4 years ago
Alternatives and similar repositories for Etw-Syscall
Users that are interested in Etw-Syscall are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Using NtCreateFile and NtDeviceIoControlFile to realize the function of winsock（利用NtCreateFile和NtDeviceIoControlFile 实现winsock的功能）☆128Sep 9, 2022Updated 4 years ago
- direct systemcalls with a modern c++20 interface.☆45Jan 6, 2023Updated 3 years ago
- Load Dll into Kernel space☆41Jul 24, 2026Updated 3 months ago
- c++ implementation of windows heavens gate☆69Feb 12, 2021Updated 5 years ago
- Hook NtDeviceIoControlFile with PatchGuard☆103May 10, 2022Updated 4 years ago
- Serverless GPU API endpoints on Runpod - Get Bonus Credits • AdSkip the infrastructure headaches. Auto-scaling, pay-as-you-go, no-ops approach lets you focus on innovating your application.
- Walks the Process' VAD list to grab the PTE's corresponding to a usermode virtual address, all to get the physical address☆23Nov 22, 2021Updated 4 years ago
- Basic experimentation with Windows drivers.☆19Mar 3, 2023Updated 3 years ago
- A simple example how to decrypt kernel debugger data block☆32Feb 8, 2021Updated 5 years ago
- 滥用cow机制进行全局注入☆96Jan 1, 2021Updated 5 years ago
- Call NtCreateUserProcess directly as normal.☆78May 17, 2022Updated 4 years ago
- 让Etwhook再次伟大! Make InfinityHook Great Again!☆149Jun 24, 2021Updated 5 years ago
- ☆19Oct 31, 2022Updated 4 years ago
- 沙箱测试,测评国内常见沙箱的代码与结论☆109Jul 3, 2021Updated 5 years ago
- Monitor ETW events for Windows process mitigation policies, with stack traces☆30Oct 7, 2022Updated 4 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- vmware-backdoor☆33Jul 11, 2021Updated 5 years ago
- Analyze Windows x64 Kernel Memory Layout☆134Nov 19, 2020Updated 5 years ago
- 关于intel和amd指令行为不一样这件事☆57Apr 15, 2022Updated 4 years ago
- Radical Windows ARK☆256Apr 18, 2025Updated last year
- Code Integrity Violation Spotter☆17Jun 11, 2024Updated 2 years ago
- 40行代码检测到大部分CobaltStrike的shellcode☆290Jul 25, 2021Updated 5 years ago
- 研究和移除各种内核回调,在anti anti cheat的路上越走越远☆180Aug 26, 2022Updated 4 years ago
- Simple Demo of using Windows Hypervisor Platform☆29Jul 14, 2025Updated last year
- 从MmPfnData中枚举进程和页目录基址☆230Aug 18, 2023Updated 3 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- 利用物理内存映射，实现虚拟内存的伪隐藏☆84Sep 15, 2022Updated 4 years ago
- query-pdb is a server-side software for parsing PDB files. The software provides PDB online parsing service.☆170Mar 30, 2026Updated 7 months ago
- kernel driver used to monitor the activity of BadlionAnticheat.sys by patching its IAT☆32Jul 9, 2021Updated 5 years ago
- Driver Loader/BE Bypass/Win Malware(lol)☆35Jun 25, 2019Updated 7 years ago
- ☆39Oct 29, 2020Updated 6 years ago
- Use ntdll/ntoskrnl to implement Kernel32, Advapi32 and other APIs. It includes user-mode and kernel-mode.☆100Jun 6, 2026Updated 5 months ago
- Dump PDB Symbols including support for Bochs Debugging Format (with wine support)☆14Aug 11, 2023Updated 3 years ago
- Easily hook WIN32 x64 functions☆18Feb 19, 2025Updated last year
- Kernel DLL Injector using NX Bit Swapping and VAD hide for hiding injected DLL☆221Nov 12, 2020Updated 5 years ago
- Simple, predictable pricing with DigitalOcean hosting • AdAlways know what you'll pay with monthly caps and flat pricing. Enterprise-grade infrastructure trusted by 600k+ customers.
- Open-source EDR kernel-component for system monitoring and DLL injection☆33Nov 14, 2020Updated 5 years ago
- 简单安排一下 autochk.sys 这个rootkit☆72Mar 7, 2023Updated 3 years ago
- mash hypervisor host pml4☆16Jun 22, 2022Updated 4 years ago
- windows内核安全与驱动开发代码☆12Apr 4, 2020Updated 6 years ago
- Injector with kernel power☆18Jan 2, 2021Updated 5 years ago
- ☆142Dec 10, 2022Updated 3 years ago
- An anti-cheat project that includes kernel mode.☆39Jul 29, 2021Updated 5 years ago