ljvblfz / WindowsKernelPhilosophyLinks
Windows内核设计思想
☆23Updated 8 years ago
Alternatives and similar repositories for WindowsKernelPhilosophy
Users that are interested in WindowsKernelPhilosophy are comparing it to the libraries listed below
Sorting:
- x64HOOK库☆18Updated 5 years ago
- ☆23Updated 7 years ago
- ☆27Updated 6 years ago
- For Example. See Miro's Blog☆30Updated 2 years ago
- 进程保护、进程过滤的小工程、主要亮点是在内核中对操作系统中的用户进行管理☆16Updated 10 years ago
- 内核级ARK工具。☆59Updated 8 years ago
- Sysark全称system anti-rootkit，是我学习内核写的工具（2013年的代码，后续不会再更新），里面基本上所有的功能都是用内核实现的。这里只是实现了反rootkit部分功能，作为工具的话，本人觉得还欠完善，但作为学习，或有人需要。目前针对的是XP SP2，…☆27Updated 7 years ago
- A simple x86 (32 bit) disassembler☆7Updated 6 years ago
- An ark tool's driver☆40Updated 8 years ago
- ☆40Updated 5 years ago
- windows inlinehook R3 R0☆11Updated 7 years ago
- 卓然主动防御源码（可执行文件+完整源码+完整作品报告）☆15Updated 6 years ago
- Demo List cm/ps/ob/minifilter callback And Patch/Bypass it☆28Updated 7 years ago
- 锁主页驱动☆37Updated 6 years ago
- A file system filter, you can do some interesting thing, maybe it's cool.☆56Updated 6 years ago
- 逆的或者收集的别人家的代码☆27Updated 4 months ago
- x64 Kernel Hooks Detection☆24Updated 8 years ago
- 大表哥的Syscall-Monitor☆34Updated 5 years ago
- ☆14Updated 11 months ago
- by others☆38Updated 7 years ago
- map driver to memory☆26Updated 6 years ago
- ☆26Updated 8 years ago
- PoC of BOOST-ed _EPROCESS.VadRoot iterating☆25Updated 11 years ago
- 解析静态库(Lib)文件， 提取出所有函数信息，组织成自定义格式文件☆38Updated 11 years ago
- PDB Explorer 是一个能够查看微软 pdb 文件（Program DataBase，程序数据库）的工具，它能够将 pdb 文件中的 struct、union 及 enum 类型的定义以 C/C++ 的语法显示出来，特别适合 Windows 底层研究人员及 DDK …☆38Updated 10 years ago
- ☆31Updated 6 years ago
- 一个可以帮助你进行Windows驱动开发和分析的工具。☆44Updated 4 years ago
- Map memory to user space and manipulate user memory, using capmon☆23Updated 6 years ago
- ☆38Updated 6 years ago
- 管道监视器,类似于spyxx之类的东西,一般用于监视目标进程的系统调用.关键词:detours+piep☆23Updated 11 years ago