joshfinley / SyscallDumper
Dump system call codes, names, and offsets from Ntdll.dll
☆70Updated 11 months ago
Related projects: ⓘ
- A quick-and-dirty anti-hook library proof of concept.☆100Updated 6 years ago
- x64 syscall caller in C++.☆84Updated 6 years ago
- Exploit MsIo vulnerable driver☆82Updated 3 years ago
- My Proof of Concept code for different publicly disclosed vulnerabilities☆45Updated 4 months ago
- A proof of concept demonstrating instrumentation callbacks on Windows 10 21h1 with a TLS variable to ensure all syscalls are caught.☆111Updated 2 years ago
- ☆64Updated 3 years ago
- Disable Driver Callbacks☆97Updated 6 years ago
- Hygieia, a vulnerable driver traces scanner written in C++ as an x64 Windows kernel driver.☆133Updated 2 years ago
- x64 Windows implementation of virtual-address to physical-address translation☆39Updated 3 years ago
- PE-Dump-Fixer☆100Updated 4 years ago
- A PoC for requesting HWIDs directly from hardware, skipping any potential hooks or OS support.☆77Updated 3 years ago
- Resolve DOS MZ executable symbols at runtime☆93Updated 2 years ago
- Discarded Section Manual Map☆65Updated 4 years ago
- C++ library for parsing and manipulating PE files statically and dynamically.☆82Updated 11 months ago
- ☆150Updated 4 years ago
- A proof of concept demonstrating communication via mapped shared memory structures between a user-mode process and a kernel-mode payload …☆73Updated 3 years ago
- Intercepting DeviceControl via WPP☆125Updated 4 years ago
- Different aproaches to detecting EPT hooks☆76Updated 2 years ago
- A documented Windows x64 bit Usermode Injector that works via hooking IAT and hijacking its threads to execute shellcode.☆62Updated last year
- Obfuscate calls to imports by patching in stubs☆58Updated 3 years ago
- ☆135Updated 3 years ago
- A simple tool to assemble shellcode ready to be copy-pasted into code☆63Updated 2 years ago
- Using DKOM to hide kernel mode drivers☆51Updated 6 years ago
- x64 Windows kernel driver mapper, inject unsigned driver using anycall☆103Updated 7 months ago
- Windows Kernel Driver dlls injector using APC☆59Updated 6 years ago
- (DEPRECATED) A simple anti-anti debug library for Windows☆29Updated 4 years ago
- Demystifying PatchGuard is a comprehensive analysis of Microsoft's security feature called PatchGuard, which is designed to prevent unaut…☆100Updated last year
- Handling C++ & __try exceptions without the need of built-in handlers.☆63Updated 3 years ago
- PAGE_GUARD based hooking library☆38Updated 2 years ago
- scans through physical memory and paging tables in kernel mode☆104Updated 3 years ago