Repository of Microsoft Driver Block Lists based off of OS-builds
☆45Apr 14, 2024Updated 2 years ago
Alternatives and similar repositories for MSFT_DriverBlockList
Users that are interested in MSFT_DriverBlockList are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Proof-of-Concept to evade auditd by tampering via ptrace☆19Aug 3, 2023Updated 3 years ago
- BadExclusions is a tool to identify folder custom or undocumented exclusions on AV/EDR☆21Feb 8, 2024Updated 2 years ago
- Shareds for kernel developement☆28Dec 23, 2013Updated 12 years ago
- Async port/ping scanner BOF. Supports IP/port ranges, CIDR notation and hostnames.☆20Jul 23, 2026Updated 3 months ago
- ☆19Oct 31, 2022Updated 4 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Self delete DLL (2)☆14Feb 15, 2024Updated 2 years ago
- Monitor ETW events for Windows process mitigation policies, with stack traces☆30Oct 7, 2022Updated 4 years ago
- Simple Demo of using Windows Hypervisor Platform☆29Jul 14, 2025Updated last year
- This is the P.O.C source for hooking the system calls on Windows 10 (1903) using it's dynamic trace feature weakness☆62Sep 12, 2019Updated 7 years ago
- ☆13Apr 23, 2019Updated 7 years ago
- A python port of CCob's ThreadlessInject☆25Mar 18, 2023Updated 3 years ago
- Code Integrity Violation Spotter☆17Jun 11, 2024Updated 2 years ago
- ☆25Apr 28, 2024Updated 2 years ago
- In-memory hiding technique☆66Jan 5, 2025Updated last year
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Windows Portable Device COM BOF☆17Mar 30, 2026Updated 7 months ago
- Admin to Kernel code execution using the KSecDD driver☆278Apr 19, 2024Updated 2 years ago
- Microsoft Edge Microsoft Edge主页算法☆20Apr 15, 2019Updated 7 years ago
- A VSCode devcontainer for development of COFF files with batteries included.☆49Jul 10, 2023Updated 3 years ago
- a simple intel vt code both support x86 & x64. PatchGuard monitor.☆76Oct 28, 2021Updated 5 years ago
- Thats it! An Open-Source Windows UEFI Rootkit☆42Jul 19, 2025Updated last year
- ☆84Aug 26, 2024Updated 2 years ago
- Extension functionality for the NightHawk operator client☆27Nov 3, 2023Updated 2 years ago
- Open-source EDR kernel-component for system monitoring and DLL injection☆33Nov 14, 2020Updated 5 years ago
- Serverless GPU API endpoints on Runpod - Get Bonus Credits • AdSkip the infrastructure headaches. Auto-scaling, pay-as-you-go, no-ops approach lets you focus on innovating your application.
- 正确解析 _HEAP_VS_***符号 ,支持在最新win11 24h2 运行,替换windbg自带的!pool命令☆17Nov 30, 2024Updated last year
- PoC memory injection detection agent based on ETW, for offensive and defensive research purposes☆300Apr 10, 2021Updated 5 years ago
- Helper script for BloodHound to automatically add relationships between multiple accounts owned by the same individual☆15Jul 13, 2022Updated 4 years ago
- A simple way to spoof return addresses using an exception handler☆43Aug 3, 2022Updated 4 years ago
- Programmatically access a TLS certificate chain in C++ and C#☆12Oct 27, 2018Updated 8 years ago
- Implementation of an export address table protection mitigation, like Export Address Filtering (EAF)☆114May 21, 2023Updated 3 years ago
- ☆59Aug 28, 2023Updated 3 years ago
- A simple example how to decrypt kernel debugger data block☆32Feb 8, 2021Updated 5 years ago
- A C++ syscall ID extractor for Windows. Developed, debugged and tested on 20H2.☆22May 25, 2021Updated 5 years ago
- Deploy open-source AI quickly and easily - Special Bonus Offer • AdRunpod Hub is built for open source. One-click deployment and autoscaling endpoints without provisioning your own infrastructure.
- PoC to demonstrate how CLR ETW events can be tampered.☆187Mar 26, 2020Updated 6 years ago
- Jormungandr is a kernel implementation of a COFF loader, allowing kernel developers to load and execute their COFFs in the kernel.☆242Sep 26, 2023Updated 3 years ago
- ☆40Mar 23, 2023Updated 3 years ago
- Windows driver template, using C++20 & cmake & GithubActions☆25Aug 9, 2024Updated 2 years ago
- ☆14Mar 8, 2019Updated 7 years ago
- a modified CONTEXT based ropchain to circumvent CFG-FindHiddenShellcode and EtwTi-FluctuationMonitor☆109Mar 25, 2024Updated 2 years ago
- A simple tool for enumerating dynamic endpoints on a DCE/RPC remote or local endpoint mapper.☆16Oct 9, 2020Updated 6 years ago