A kernel mode Windows rootkit in development.
☆46Dec 31, 2021Updated 4 years ago
Alternatives and similar repositories for Salient-Rootkit
Users that are interested in Salient-Rootkit are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- automates exploits using ROP chains, using ntdll-scraper☆15May 26, 2022Updated 4 years ago
- A C++ syscall ID extractor for Windows. Developed, debugged and tested on 20H2.☆22May 25, 2021Updated 5 years ago
- 锁主页驱动☆40Mar 14, 2019Updated 7 years ago
- Recreation of Lode Runner The Legend Returns☆15Feb 13, 2020Updated 6 years ago
- c++ implementation of windows heavens gate☆69Feb 12, 2021Updated 5 years ago
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- Demo to show how write ALPC Client & Server using native Ntdll.dll syscalls.☆21Jan 25, 2022Updated 4 years ago
- Some source code to demonstrate avoiding certain direct syscall detections by locating and JMPing to a legitimate syscall instruction wit…☆218Feb 20, 2023Updated 3 years ago
- Windows system spy for Mouse, Keyboard and Gamepad(Joystick).☆15Jul 6, 2022Updated 4 years ago
- Reverse engineered source code of the autochk rootkit☆213Nov 1, 2019Updated 7 years ago
- Example for PagedOut!☆26Oct 22, 2019Updated 7 years ago
- ☆10Updated this week
- ☆19Oct 31, 2022Updated 4 years ago
- a simple intel vt code both support x86 & x64. PatchGuard monitor.☆76Oct 28, 2021Updated 5 years ago
- Скрытие строки от отладчиков и декомпиляторов☆48Oct 16, 2019Updated 7 years ago
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- Detects if a Kernel mode debugger is active by reading the value of KUSER_SHARED_DATA.KdDebuggerEnabled. It is a high level and portable …☆25Sep 18, 2017Updated 9 years ago
- Open Anti Cheat☆27Jul 16, 2022Updated 4 years ago
- ☆17Mar 3, 2016Updated 10 years ago
- Microsoft Edge Microsoft Edge主页算法☆20Apr 15, 2019Updated 7 years ago
- init☆14Mar 16, 2020Updated 6 years ago
- A POC for Windows Extension Host hooking☆25Jul 13, 2019Updated 7 years ago
- A kernel-mode rootkit with remote control☆226Nov 13, 2020Updated 5 years ago
- All Nt Syscall and W32k Syscall in one asm, include, and call it!☆58Nov 4, 2021Updated 5 years ago
- Code Integrity Violation Spotter☆17Jun 11, 2024Updated 2 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Code to make it easier to write an NDIS network driver on Windows☆95Oct 1, 2023Updated 3 years ago
- NINA: No Injection, No Allocation x64 Process Injection Technique☆225Jun 9, 2020Updated 6 years ago
- A simple example how to decrypt kernel debugger data block☆32Feb 8, 2021Updated 5 years ago
- (shard of furikuri project) assambler for code obfuscation☆19Oct 29, 2019Updated 7 years ago
- Hide codes/data in the kernel address space.☆185May 8, 2021Updated 5 years ago
- Automatically exported from code.google.com/p/wskudp☆43Feb 3, 2016Updated 10 years ago
- This is the P.O.C source for hooking the system calls on Windows 10 (1903) using it's dynamic trace feature weakness☆62Sep 12, 2019Updated 7 years ago
- Open-source EDR kernel-component for system monitoring and DLL injection☆33Nov 14, 2020Updated 5 years ago
- windows kernelmode driver to inject dll into each and every process and perform systemwide function hooking☆54Aug 28, 2022Updated 4 years ago
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- My try to implement a virtual CPU in C☆19Nov 18, 2023Updated 2 years ago
- Disable PPL via custom driver and dump lsass☆15Mar 13, 2021Updated 5 years ago
- kernel driver used to monitor the activity of BadlionAnticheat.sys by patching its IAT☆32Jul 9, 2021Updated 5 years ago
- Simple Demo of using Windows Hypervisor Platform☆29Jul 14, 2025Updated last year
- VT-based PCI device monitor (SPI)☆158Oct 29, 2020Updated 6 years ago
- hooking KiUserApcDispatcher☆26Apr 3, 2017Updated 9 years ago
- ☆16Apr 18, 2023Updated 3 years ago