kevinalmansa / TLS_Examples
Examples of Static and Dynamic Thread Local Storage Callback Creation
☆19Updated 7 years ago
Related projects ⓘ
Alternatives and complementary repositories for TLS_Examples
- (DEPRECATED) A simple anti-anti debug library for Windows☆29Updated 4 years ago
- A library for intel VT-x hypervisor functionality supporting EPT shadowing.☆48Updated 3 years ago
- ☆66Updated 3 years ago
- Example of hijacking system calls via function pointer tables☆32Updated 3 years ago
- NT reversal☆26Updated 6 years ago
- Analysing and defeating PatchGuard universally☆34Updated 4 years ago
- A reflexive driver loader to bypass Windows DSE (featuring a custom PE loader)☆38Updated 6 years ago
- Manual PE image mapper☆61Updated 11 years ago
- Reading/writing memory from kernel-mode☆21Updated 7 years ago
- Two PoC of accessing process virtual memory via NT Kernel☆24Updated 3 years ago
- Code injection by hijacking threads in Windows 32-bit applications☆43Updated 6 years ago
- Simple IOCTL hooking driver for Kernel- User - Mode communication.☆10Updated 4 years ago
- pointer obfuscation☆19Updated 6 years ago
- A poc that abuses Enclave☆36Updated 2 years ago
- Скрытие строки от отладчиков и декомпиляторов☆51Updated 5 years ago
- Bypassing code hooks detection in modern anti-rootkits via building faked PTE entries.☆73Updated 13 years ago
- This is the P.O.C source for hooking the system calls on Windows 10 (1903) using it's dynamic trace feature weakness☆51Updated 5 years ago
- reverse engineering of bedaisy.sys (battleyes kernel driver) - Aki2k/BEDaisy☆59Updated 4 years ago
- realExtern.sys driver☆65Updated 4 years ago
- IA32-doc is a project which aims to put as many definitions from the Intel Manual into machine-processable format as possible☆16Updated 2 years ago
- POC of sysenter x64 LSTAR MSR hook☆38Updated 10 years ago
- a dumb rpm/wpm example driver☆14Updated 3 years ago
- ☆33Updated 4 years ago
- Stealthy Injector that leverages a vulnerable driver and other exploits to remain undetected☆37Updated 5 years ago
- ☆36Updated 7 years ago
- Intraceptor intercept Windows NT API calls and redirect them to a kernel driver to bypass process/threads handle protections.☆27Updated 2 years ago
- Bypasses for Windows kernel callbacks PatchGuard protection☆42Updated 3 years ago
- x64 syscall caller in C++.☆84Updated 6 years ago