mq1n / HandleHijackLinks
Windows handle stealing POC with NtDuplicateObject
☆40Updated 8 years ago
Alternatives and similar repositories for HandleHijack
Users that are interested in HandleHijack are comparing it to the libraries listed below
Sorting:
- Code injection by hijacking threads in Windows 32-bit applications☆43Updated 6 years ago
- My take on the capcom driver vulnerability☆28Updated 8 years ago
- Manual PE image mapper☆65Updated 11 years ago
- (DEPRECATED) A simple anti-anti debug library for Windows☆29Updated 5 years ago
- Stealthy Injector that leverages a vulnerable driver and other exploits to remain undetected☆36Updated 6 years ago
- Capcom wrapper with safety in mind.☆82Updated 7 years ago
- New handle stealing technique for windows apps☆13Updated 7 years ago
- Bypassing code hooks detection in modern anti-rootkits via building faked PTE entries.☆79Updated 14 years ago
- Polymorphic Stub Creator☆34Updated 8 years ago
- NT reversal☆25Updated 7 years ago
- Analyze PatchGuard☆59Updated 6 years ago
- Some garbage drivers written for getting started☆66Updated 5 years ago
- A sample on how to inject a DLL from a kernel driver☆62Updated 8 years ago
- A reflexive driver loader to bypass Windows DSE (featuring a custom PE loader)☆41Updated 6 years ago
- Disable Driver Callbacks☆104Updated 7 years ago
- ☆24Updated 6 years ago
- win32/x64 obfuscate framework☆32Updated 6 years ago
- ☆69Updated 4 years ago
- Example of hijacking system calls via function pointer tables☆31Updated 4 years ago
- kernel-mode TDI client which can send and receive HTTP requests☆55Updated 7 years ago
- Communication via callback☆72Updated 5 years ago
- ☆17Updated 5 years ago
- This is the P.O.C source for hooking the system calls on Windows 10 (1903) using it's dynamic trace feature weakness☆53Updated 5 years ago
- using gpuz to load driver☆35Updated 6 years ago
- Spoof Windows Test Signing Mode☆29Updated 6 years ago
- Hiding x32/x64 Modules/DLLs using PEB☆61Updated 10 years ago
- Simple code generation library developed in C intended for code generation in Kernel mode☆17Updated 2 years ago
- Currently supports injecting signed/unsigned DLLs in 64-bit processes☆63Updated 4 years ago
- ☆38Updated 8 years ago
- ☆31Updated 6 years ago