mq1n / HandleHijackLinks
Windows handle stealing POC with NtDuplicateObject
☆41Updated 8 years ago
Alternatives and similar repositories for HandleHijack
Users that are interested in HandleHijack are comparing it to the libraries listed below
Sorting:
- Code injection by hijacking threads in Windows 32-bit applications☆43Updated 7 years ago
- Manual PE image mapper☆66Updated 12 years ago
- (DEPRECATED) A simple anti-anti debug library for Windows☆30Updated 5 years ago
- My take on the capcom driver vulnerability☆28Updated 8 years ago
- Capcom wrapper with safety in mind.☆83Updated 7 years ago
- Hiding x32/x64 Modules/DLLs using PEB☆62Updated 10 years ago
- Bypassing code hooks detection in modern anti-rootkits via building faked PTE entries.☆79Updated 15 years ago
- NT reversal☆25Updated 7 years ago
- A sample on how to inject a DLL from a kernel driver☆61Updated 9 years ago
- New handle stealing technique for windows apps☆14Updated 8 years ago
- Disable Driver Callbacks☆104Updated 8 years ago
- ☆31Updated 7 years ago
- Communication via callback☆73Updated 6 years ago
- Polymorphic Stub Creator☆34Updated 8 years ago
- ☆68Updated 5 years ago
- Stealthy Injector that leverages a vulnerable driver and other exploits to remain undetected☆37Updated 7 years ago
- Simple code generation library developed in C intended for code generation in Kernel mode☆17Updated 3 years ago
- using gpuz to load driver☆36Updated 6 years ago
- Currently supports injecting signed/unsigned DLLs in 64-bit processes☆62Updated 5 years ago
- Шаблон полнофункционального драйвера и обёртки над ядерным API☆114Updated 9 years ago
- Retrieve pointers to undocumented kernel functions and offsets to members within undocumented structures to use in your driver by using t…☆64Updated 6 years ago
- r0akmap is a PoC driver manual mapper based on r0ak☆38Updated 7 years ago
- CatDriver - The Kernel Mode Driver that written in C++. It is an useful driver and has the highest privilege level on the Windows platfor…☆63Updated 5 years ago
- Some garbage drivers written for getting started☆66Updated 6 years ago
- Modify process handle permissions☆61Updated 9 years ago
- Spoof Windows Test Signing Mode☆29Updated 7 years ago
- ☆28Updated 8 years ago
- Capstone disassembly/disassembler framework: Core (Arm, Arm64, M68K, Mips, PPC, Sparc, SystemZ, X86, X86_64, XCore) + bindings (Python, J…☆15Updated 6 years ago
- Anti-Anti-VM solution via Windows Driver☆62Updated 7 years ago
- Analyze PatchGuard☆56Updated 7 years ago