This is the AV ("protection solution") used for my windows 10 rootkit main project. this includes the installer stager program, a service to perform automatic UM operations on boot and the protection driver used for SSDT, inline hooks detection, hidden processes by DKOM, vulnurable drivers validation and others.
☆13May 2, 2024Updated 2 years ago
Alternatives and similar repositories for ProtectionSolution
Users that are interested in ProtectionSolution are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Loading Fileless Remote PE from URI to memory with argument passing and ETW patching and NTDLL unhooking and No New Thread technique I…☆11Jul 18, 2025Updated last year
- Some crazy PE executables protection kernel driver☆20May 2, 2020Updated 6 years ago
- ☆11Oct 17, 2020Updated 6 years ago
- Windows file system driver which allows to block access to files at run-time (C/C++, C#, WDK, SDK)☆12Jan 1, 2023Updated 3 years ago
- Detour hooking IRQ1 ISR through IDT (Interrupt Descriptor Table)☆21Mar 16, 2026Updated 7 months ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- it's a driver injector or driver loader header lib(Windows)☆13Aug 5, 2023Updated 3 years ago
- ☆14Apr 7, 2018Updated 8 years ago
- hkxiaoyu的windows c++应用层基础库☆12Sep 17, 2020Updated 6 years ago
- Ready-to-use headers for Windows Kernel SSDT indices☆10Apr 12, 2020Updated 6 years ago
- Kernel<->Usermode shared memory communcation using manually mapped driver☆24Dec 12, 2021Updated 4 years ago
- RunPE using Hell's Gate technique.☆31Dec 4, 2020Updated 5 years ago
- A Practical example of ELAM (Early Launch Anti-Malware)☆35Nov 12, 2021Updated 4 years ago
- iSwordSDK （Provide Powerful Kernel API For Ring3 Applications）☆17Mar 25, 2022Updated 4 years ago
- ☆18Oct 12, 2014Updated 12 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Disable NMI Callbacks with Kernelmode Driver☆20Mar 15, 2023Updated 3 years ago
- x64 Windows privilege elevation using anycall☆22May 28, 2021Updated 5 years ago
- Windows 10/11 unsigned kernel driver load/debugging☆23Feb 17, 2023Updated 3 years ago
- .NET Framework 4.0 based Driver Loader for NoirVisor☆14Jan 12, 2021Updated 5 years ago
- Anti-rootkit works as a Windows system driver.☆13Mar 14, 2022Updated 4 years ago
- Repository of different kernel drivers written while studying Windows NT Driver development☆12Apr 14, 2024Updated 2 years ago
- User mode C++ tool for detecting UEFI drivers, bootkit malware and modifications by checking the Windows bootloader and managing BCD☆13Sep 6, 2024Updated 2 years ago
- Tool for PDB generation from IDA Pro database☆12Jul 27, 2020Updated 6 years ago
- Windows memory hacking library☆23Aug 12, 2018Updated 8 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Nightshade is a Windows Memory Manipluation library specifically for injecting DLLs and Game Hacking☆13Dec 12, 2022Updated 3 years ago
- Enumerates very, very large directories quickly by directly using kernel syscalls. For POSIX and Windows. WARNING THIS IS OBSOLETE. USE B…☆15Aug 13, 2014Updated 12 years ago
- Simple IOCTL hooking driver for Kernel- User - Mode communication.☆11Jul 26, 2020Updated 6 years ago
- wfp2socks☆17Oct 8, 2026Updated 3 weeks ago
- ☆28Sep 17, 2024Updated 2 years ago
- Windows Simple Process Logger implemented as driver☆18Oct 27, 2017Updated 9 years ago
- PE Sections Packer + Loader for Windows - Packs a DLL/EXE file and maps it into the loader (C/C++)☆16Oct 19, 2025Updated last year
- **DEPRECATED: Prefer mrpt3 native packages** Fine-grained ROS packages for MRPT libraries and apps☆10Aug 11, 2026Updated 2 months ago
- Windows Kernel Http Library☆18Mar 9, 2026Updated 7 months ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Dynamic BYOVD-based mapper that has capabilities to change implementations for unsigned driver mapping☆11Aug 24, 2024Updated 2 years ago
- The project is a demo solution for one of the anti-rootkit techniques aimed on overcoming splicers☆34Mar 13, 2017Updated 9 years ago
- ☆14Apr 12, 2024Updated 2 years ago
- viewing page boundaries of pages with PAGE_NOACCESS protection reveals the presence of x64dbg.☆29Jan 1, 2017Updated 9 years ago
- ☆14Aug 4, 2022Updated 4 years ago
- ☆12Oct 24, 2022Updated 4 years ago
- debug isolated usermode process on Nested Virtualization guest vm☆33Oct 20, 2025Updated last year