repnz / set-critical-thread
Use NtSetInformationThread(ThreadBreakOnTermination) for anti-debugging
☆11Updated 5 years ago
Alternatives and similar repositories for set-critical-thread:
Users that are interested in set-critical-thread are comparing it to the libraries listed below
- Walks the Process' VAD list to grab the PTE's corresponding to a usermode virtual address, all to get the physical address☆24Updated 3 years ago
- Just an example of a well-known technique to detect memory tampering via Windows Working Sets.☆16Updated 3 years ago
- Some crazy PE executables protection kernel driver☆18Updated 4 years ago
- ☆15Updated last year
- Windows driver template, using C++20 & cmake & GithubActions☆20Updated 6 months ago
- Ready-to-use headers for Windows Kernel SSDT indices☆11Updated 4 years ago
- Bypassing kernel patch protection runtime☆19Updated 2 years ago
- An example code of CiGetCertPublisherName☆14Updated 2 years ago
- x64 assembler library☆31Updated 8 months ago
- A project on the Unicorn emulator to emulate the code of Pe files in windows☆21Updated 5 months ago
- Elevate arbitrary MSR writes to kernel execution.☆26Updated last year
- Load Dll into Kernel space☆38Updated 2 years ago
- Shh0ya Kernel Hook Driver☆21Updated 4 years ago
- XOrCryptEx lightweight C Utility/Algorithm☆11Updated 2 years ago
- win32/x64 obfuscate framework☆32Updated 5 years ago
- ☆26Updated last year
- ☆21Updated last year
- ☆30Updated last year
- Some drivers I've written while solving exercises from Practical Reverse Engineering☆15Updated 3 years ago
- Windows Console Monitor☆33Updated 5 years ago
- Protected Process Light Library☆18Updated 4 years ago
- Library for using direct system calls☆35Updated 3 weeks ago
- ☆26Updated 3 years ago
- A C++ syscall ID extractor for Windows. Developed, debugged and tested on 20H2.☆20Updated 3 years ago
- direct systemcalls with a modern c++20 interface.☆42Updated 2 years ago
- RET / JMP RBX call spoofer☆9Updated 5 years ago
- Helper Script to convert a Windbg dumped structure (using the 'dt' command) into a C structure. It creates dummy structs for you if neede…☆26Updated last year
- ☆24Updated 5 years ago
- Translates WinDbg "dt" structure dump to a C structure☆13Updated 4 years ago
- a driver to enumerate registered pnp callbacks for a particular interface class based on reversal of IoRegisterPlugPlayNotification☆11Updated 11 months ago