Hiding a system thread against conventional means of detection
☆42Oct 7, 2020Updated 5 years ago
Alternatives and similar repositories for blanket
Users that are interested in blanket are comparing it to the libraries listed below
Sorting:
- How to use PiDqSerializationWrite. Introduces how to safely read and write from mapped driver☆26May 29, 2023Updated 2 years ago
- simply manual map any system image☆18Feb 1, 2021Updated 5 years ago
- base for testing☆187Sep 28, 2024Updated last year
- ☆36Mar 19, 2019Updated 6 years ago
- Detect removed thread from PspCidTable.☆75Mar 18, 2022Updated 3 years ago
- UAC - Cheat developer platform☆28Oct 29, 2021Updated 4 years ago
- Known ring3 memory protections that can be handled at a simple level.☆67Jan 28, 2023Updated 3 years ago
- Windows Kernel Misc☆25Sep 3, 2023Updated 2 years ago
- A kernelmode driver swapping a .data pointer in the kernel to perform communication between the kernel and usermode.☆142Oct 20, 2020Updated 5 years ago
- This project will give you an example how you can hook a kernel vtable function that cannot be directly called☆84Dec 25, 2021Updated 4 years ago
- 一个界面基于IMGUI的ARK，目前R3实现☆13Nov 1, 2023Updated 2 years ago
- VEH debug plugin☆13Apr 28, 2022Updated 3 years ago
- ☆68Dec 17, 2020Updated 5 years ago
- Cool kernel communication method.☆100Jun 27, 2021Updated 4 years ago
- External Hooking ( Bypasss process byte patching checks | Injector included )☆22Mar 12, 2023Updated 2 years ago
- Communication via callback☆73Oct 9, 2019Updated 6 years ago
- IO隐藏通信封装☆17May 31, 2021Updated 4 years ago
- Written in a couple hours, don't judge :)☆17Jun 3, 2023Updated 2 years ago
- Prototype of hijacking Windows driver dispatch routines in unmapped discardable sections☆55Mar 30, 2019Updated 6 years ago
- ☆17Dec 18, 2020Updated 5 years ago
- Kernel DLL Injector using NX Bit Swapping and VAD hide for hiding injected DLL☆219Nov 12, 2020Updated 5 years ago
- This is a simple project of a driver + usermode.☆169Jan 31, 2022Updated 4 years ago
- Simulate SendInput with ClassService☆35Sep 5, 2018Updated 7 years ago
- Recursive and arbitrary code execution at kernel-level without a system thread creation☆159Apr 13, 2023Updated 2 years ago
- ☆49Feb 21, 2022Updated 4 years ago
- ☆17Dec 18, 2022Updated 3 years ago
- ☆15Oct 7, 2020Updated 5 years ago
- Proof of Concept Kernel-User Communication using System Thread.☆14Sep 24, 2023Updated 2 years ago
- A basic demonstration of directly overwriting paging structures for physical memory r/w and interprocess memory copy☆103Jun 26, 2023Updated 2 years ago
- PointerGuard is a proof-of-concept tool used to create 'guarded' pointers which disguise pointer addresses, monitor reads/writes, and pre…☆57May 23, 2022Updated 3 years ago
- Drawing from kernelmode without any hooks☆174Jul 7, 2022Updated 3 years ago
- PsSetCreateProcessNotifyRoutine/Ex/Ex2 hook☆12May 30, 2024Updated last year
- 不使用3环挂钩进行DWM桌面绘制☆82Dec 9, 2021Updated 4 years ago
- Detect-KeAttachProcess by iterating through all processes as well as checking the context of the thread.☆121Feb 8, 2022Updated 4 years ago
- ☆69Aug 31, 2021Updated 4 years ago
- POC usermode <=> kernel communication via ALPC.☆72Jun 6, 2024Updated last year
- ☆24May 17, 2022Updated 3 years ago
- Mapping your code on a 0x1000 size page☆71May 20, 2022Updated 3 years ago
- ☆148Jan 24, 2024Updated 2 years ago