johnsonjason / KeProcessOverlayLinks
Reading/writing memory from kernel-mode
☆24Updated 7 years ago
Alternatives and similar repositories for KeProcessOverlay
Users that are interested in KeProcessOverlay are comparing it to the libraries listed below
Sorting:
- ☆49Updated 6 years ago
- NT reversal☆25Updated 7 years ago
- ☆38Updated 8 years ago
- This is the first software system, which can detect a stealthy hypervisor and calculate several nested ones even under countermeasures.☆85Updated 10 years ago
- Pointer search for any classes using the RTTI feature.☆50Updated 4 years ago
- Intraceptor intercept Windows NT API calls and redirect them to a kernel driver to bypass process/threads handle protections.☆29Updated 3 years ago
- Analyze PatchGuard☆58Updated 6 years ago
- comparing data of module exports from disk and memory, then caching any differences.☆22Updated 3 years ago
- A Simple Example☆22Updated 6 years ago
- ☆36Updated 5 years ago
- Simple IOCTL hooking driver for Kernel- User - Mode communication.☆12Updated 4 years ago
- A library for intel VT-x hypervisor functionality supporting EPT shadowing.☆51Updated 4 years ago
- Enable SEH support for manual mapped x86-32bit PEs☆67Updated 6 years ago
- Currently supports injecting signed/unsigned DLLs in 64-bit processes☆63Updated 4 years ago
- Handling C++ & __try exceptions without the need of built-in handlers.☆71Updated 3 years ago
- ☆48Updated 4 years ago
- x64 Windows implementation of virtual-address to physical-address translation☆42Updated 4 years ago
- Type 2 Hypervisor for security research supported by AMD-V hardware assisted virtualization☆39Updated 2 years ago
- Custom KiSystemStartup, can be used to modificate kernel before boot.☆52Updated 3 years ago
- Example of hijacking system calls via function pointer tables☆31Updated 4 years ago
- Stealthy Injector that leverages a vulnerable driver and other exploits to remain undetected☆36Updated 6 years ago
- This is the P.O.C source for hooking the system calls on Windows 10 (1903) using it's dynamic trace feature weakness☆52Updated 5 years ago
- ☆27Updated 4 years ago
- Global DLL injector☆67Updated 4 years ago
- Some garbage drivers written for getting started☆65Updated 5 years ago
- a dumb rpm/wpm example driver☆15Updated 4 years ago
- detect hypervisor with Nmi Callback☆39Updated 2 years ago
- Two PoC of accessing process virtual memory via NT Kernel☆22Updated 4 years ago
- ☆24Updated last year
- mouseclassservicecallback detection via hook☆50Updated 3 years ago