APC Internals Research Code
☆172Jun 28, 2020Updated 6 years ago
Alternatives and similar repositories for apc-research
Users that are interested in apc-research are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Research on Windows Kernel Executive Callback Objects☆317Feb 22, 2020Updated 6 years ago
- Reverse engineered source code of the autochk rootkit☆213Nov 1, 2019Updated 7 years ago
- Load your driver like win32k.sys☆256Aug 20, 2022Updated 4 years ago
- An example of how x64 kernel shellcode can dynamically find and use APIs☆103May 14, 2020Updated 6 years ago
- Some research on AltSystemCallHandlers functionality in Windows 10 20H1 18999☆245Nov 6, 2019Updated 6 years ago
- Deploy open-source AI quickly and easily - Special Bonus Offer • AdRunpod Hub is built for open source. One-click deployment and autoscaling endpoints without provisioning your own infrastructure.
- A novel technique to communicate between threads using the standard ETHREAD structure☆116Feb 27, 2021Updated 5 years ago
- PoC exploiting Aligned Chunk Confusion on Windows kernel Segment Heap☆213Jul 2, 2020Updated 6 years ago
- proof-of-concept Windows Driver for injecting DLL into user-mode processes using APC☆1,298May 1, 2024Updated 2 years ago
- Hijack NotifyRoutine for a kernelmode thread☆39Jun 4, 2022Updated 4 years ago
- Dont Call Me Back - Dynamic kernel callback resolver. Scan kernel callbacks in your system in a matter of seconds!☆258Jul 9, 2024Updated 2 years ago
- Tutorial & a blog post that demonstrate how to code a Windows driver to inject a custom DLL into all running processes. I coded it from s…☆142Aug 2, 2021Updated 5 years ago
- hooking KiUserApcDispatcher☆26Apr 3, 2017Updated 9 years ago
- Kernel DLL Injector using NX Bit Swapping and VAD hide for hiding injected DLL☆221Nov 12, 2020Updated 5 years ago
- Call 32bit NtDLL API directly from WoW64 Layer☆61Nov 18, 2020Updated 5 years ago
- Open source password manager - Proton Pass • AdSecurely store, share, and autofill your credentials with Proton Pass, the end-to-end encrypted password manager trusted by millions.
- Some drivers I've written while solving exercises from Practical Reverse Engineering☆15Jan 9, 2022Updated 4 years ago
- This project aims to facilitate debugging a kernel driver in windows by adding support for a code change on the fly without reboot/unload…☆173Apr 20, 2023Updated 3 years ago
- INF Studio for easier working with driver installation files☆40Nov 11, 2023Updated 2 years ago
- My personal cheat sheet for using WinDbg for kernel debugging☆476Apr 17, 2025Updated last year
- Recon 2015 Presentation from Alex Ionescu☆254Jan 27, 2016Updated 10 years ago
- Windows Kernel Driver dlls injector using APC☆69Aug 11, 2018Updated 8 years ago
- A Windows kernel-mode rootkit that abuses legitimate communication channels to control a machine.☆723Aug 5, 2020Updated 6 years ago
- Code Integrity Violation Spotter☆17Jun 11, 2024Updated 2 years ago
- Recursive and arbitrary code execution at kernel-level without a system thread creation☆159Mar 16, 2026Updated 7 months ago
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- This is the P.O.C source for hooking the system calls on Windows 10 (1903) using it's dynamic trace feature weakness☆62Sep 12, 2019Updated 7 years ago
- A simple Windows kernel rootkit.☆93May 13, 2025Updated last year
- A virtualization-based endpoint security solution for Windows☆88May 23, 2021Updated 5 years ago
- A basic implementation of Patch Guard that I implemented, that includes integrity checks and other protection mechanisms I added.☆79Sep 26, 2026Updated last month
- Easy Anti PatchGuard☆220Apr 9, 2021Updated 5 years ago
- Demo to show how write ALPC Client & Server using native Ntdll.dll syscalls.☆21Jan 25, 2022Updated 4 years ago
- Windows Drivers☆100Apr 6, 2019Updated 7 years ago
- CFB is a ProcMon-style tool designed to assist capturing IRPs sent to Windows drivers.☆339Mar 26, 2024Updated 2 years ago
- PoC: Rebuild A New Path Back to the Heaven's Gate (HITB 2021)☆111May 27, 2021Updated 5 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- An example code of CiGetCertPublisherName☆15Mar 24, 2022Updated 4 years ago
- Defeating Patchguard universally for Windows 8, Windows 8.1 and all versions of Windows 10 regardless of HVCI.☆916Nov 21, 2019Updated 6 years ago
- KSOCKET provides a very basic example how to make a network connections in the Windows Driver by using WSK☆554Sep 2, 2022Updated 4 years ago
- Use ci.dll API for validating Authenticode signature of files☆171Mar 28, 2022Updated 4 years ago
- A collection of tools, source code, and papers researching Windows' implementation of CET.☆95Oct 6, 2020Updated 6 years ago
- A kernelmode driver swapping a .data pointer in the kernel to perform communication between the kernel and usermode.☆134Oct 20, 2020Updated 6 years ago
- WinDBG Anti-RootKit Extension☆642Jul 29, 2020Updated 6 years ago