momo5502 / ept-hook-detectionLinks
šŖ Different aproaches to detecting EPT hooks
ā109Updated 3 years ago
Alternatives and similar repositories for ept-hook-detection
Users that are interested in ept-hook-detection are comparing it to the libraries listed below
Sorting:
- Kernel driver for detecting Intel VT-x hypervisors.ā184Updated last year
- A basic 100 loc CPU emulator using the existing code of ntoskrnl.exeā70Updated last year
- ā133Updated 2 years ago
- Shows an example of how to implement VT-d/AMD-Vi on Windowsā116Updated last year
- A Hyper-V Hacking Framework For Windows 10 x64 (AMD & Intel)ā62Updated last year
- A simple ida python script to find .data ptrā50Updated 2 years ago
- Bypassing EasyAntiCheat.sys self-integrity by abusing call hierarchyā81Updated 2 years ago
- Detect-KeAttachProcess by iterating through all processes as well as checking the context of the thread.ā113Updated 3 years ago
- Some psuedo snippets from BattlEye's BEDaisy.sys loaded on Rainbow Six: Siege.ā124Updated 3 years ago
- a minimalistic windows hypervisor for amd processorsā106Updated 2 years ago
- Obfuscate calls to imports by patching in stubsā68Updated 3 years ago
- Some usefull info when reverse engineering Kernel Mode Anti-Cheatā71Updated 2 years ago
- nmi stackwalking + module verificationā119Updated last year
- A very simple C++ library for download pdb, get rva of function, global variable and offset from struct.ā143Updated last year
- Handling C++ & __try exceptions without the need of built-in handlers.ā71Updated 3 years ago
- just proof of concept. hooking MmCopyMemory PG safe.ā71Updated last year
- Kernel ReClassExā62Updated last year
- Kernel Lazy Importerā114Updated last year
- based on https://github.com/secrary/Hooking-via-InstrumentationCallbackā71Updated 5 years ago
- Hygieia, a vulnerable driver traces scanner written in C++ as an x64 Windows kernel driver.ā145Updated 3 years ago
- Ghetto user mode emulation of Windows kernel drivers.ā139Updated 7 months ago
- ā70Updated 2 years ago
- An x64 page table iterator written in C++ as a kernel mode windows driver.ā108Updated 4 years ago
- Unknowncheats Magically Optimized Tidy Mapper using nvaudioā124Updated 11 months ago
- Windows PDB parser for kernel-mode environment.ā97Updated 2 years ago
- unorthodox approach to analyze a trace, but this helped me get comfy with x64 instructions overall (excluding sse/avx/etc lol), cleared uā¦ā60Updated last year
- reverse engineering of bedaisy.sys (battleyes kernel driver) - Aki2k/BEDaisyā84Updated 4 years ago
- A library to assist with memory & code protection.ā56Updated last year
- Reverse Engineering a signed kernel driver packed and virtualized with VMProtect 3.6ā102Updated 2 years ago
- PE-Dump-Fixerā105Updated 5 years ago