pvthuyet / windows-kernel-programmingLinks
Windows kernel
☆12Updated 5 years ago
Alternatives and similar repositories for windows-kernel-programming
Users that are interested in windows-kernel-programming are comparing it to the libraries listed below
Sorting:
- This script is used to unload PsSetCreateProcessNotifyRoutineEx, PsSetCreateProcessNotifyRoutine, PsSetLoadImageNotifyRoutine and PsSetCr…☆63Updated last year
- the Open Source and Pure C++ Packer for eXecutables☆21Updated 2 years ago
- Windows 10 DLL Injector via Driver utilizing VAD and hiding the loaded driver☆53Updated 2 years ago
- ☆35Updated 2 years ago
- API Hammering with C++20☆49Updated 3 years ago
- A Practical example of ELAM (Early Launch Anti-Malware)☆35Updated 4 years ago
- Safely manage the unloading of DLLs that have been hooked into a process. Context: https://github.com/KNSoft/KNSoft.SlimDetours/discussio…☆80Updated 6 months ago
- Process Ghosting is a technique in which a process is created from a delete pending file. This means the created process is not backed by…☆16Updated last year
- ☆20Updated 5 years ago
- Piece of code to detect and remove hooks in IAT☆65Updated 3 years ago
- havoc kaine plugin to mitigate PAGE_GUARD protected image headers using JOP gadgets☆42Updated last year
- Repository of Microsoft Driver Block Lists based off of OS-builds☆42Updated last year
- One Click Tool to Scan All the Enabled Protection of current Windows NT Kernel☆43Updated 2 years ago
- SoulExtraction is a windows driver library for extracting cert information in windows drivers☆25Updated 2 years ago
- This program is used to perform reflective DLL Injection to a remote process specified by the user.☆65Updated 2 years ago
- Proof-of-concept kernel driver that hijacks the Windows kernel extension table mechanism to preserve process notify callbacks even when a…☆92Updated 6 months ago
- Process Injection: APC Injection☆32Updated 4 years ago
- Youtube channel sample code☆54Updated this week
- Manually perform syscalls without going through any external API or DLL.☆19Updated 2 years ago
- Windows LPE Nday☆31Updated last year
- ☆88Updated last year
- really ?☆12Updated last year
- ☆30Updated 4 months ago
- Windows kernel driver encryption library, support base64, aes-256, rsa-2048 and higher, ecc-256, single file, minimal dependence, support…☆22Updated 4 years ago
- Demo from the Malware Analysis and Development Webinar☆23Updated last year
- Your NTDLL vaccine from modern direct syscall methods.☆36Updated 3 years ago
- Implementation of ITaskHandler in C++☆14Updated 2 years ago
- A class to emulate the behavior of NtQuerySystemInformation when passed the SystemHypervisorDetailInformation information class☆27Updated 2 years ago
- Reimplementation of the KExecDD DSE bypass technique.☆57Updated last year
- Templated Obfuscation example in C++ for protecting/hiding values in memory☆39Updated 11 months ago