sreeharshabandi / CaptainLinks
Process Creation, Image Load and Thread Creation Notification
☆13Updated 2 years ago
Alternatives and similar repositories for Captain
Users that are interested in Captain are comparing it to the libraries listed below
Sorting:
- Some drivers I've written while solving exercises from Practical Reverse Engineering☆15Updated 3 years ago
- ☆31Updated 3 years ago
- A simple example how to decrypt kernel debugger data block☆30Updated 4 years ago
- Protected Process Light Library☆18Updated 5 years ago
- Windows driver template, using C++20 & cmake & GithubActions☆23Updated last year
- x64 assembler library☆31Updated last year
- UnknownField is a tool based clang that obfuscating the order of fields to protect your C/C++ game or code.☆44Updated 2 years ago
- ☆32Updated 4 years ago
- Static Library For Windows Drivers☆38Updated 3 months ago
- Bypassing kernel patch protection runtime☆20Updated 2 years ago
- Exports monitoring plugin for x64dbg☆22Updated 2 years ago
- ☆26Updated 2 years ago
- windows kernelmode driver to inject dll into each and every process and perform systemwide function hooking☆53Updated 3 years ago
- A Windows API hooking library !☆31Updated 3 years ago
- X86/X64 Hardware Breakpoint Manager☆42Updated 4 years ago
- ☆23Updated 2 years ago
- ☆15Updated 2 years ago
- Walks the Process' VAD list to grab the PTE's corresponding to a usermode virtual address, all to get the physical address☆23Updated 4 years ago
- ☆28Updated 2 years ago
- Debug Print viewer (user and kernel)☆69Updated last year
- c++ implementation of windows heavens gate☆70Updated 4 years ago
- Windows Research Kernel☆36Updated 2 months ago
- Use NtSetInformationThread(ThreadBreakOnTermination) for anti-debugging☆14Updated 6 years ago
- WinHvShellcodeEmulator (WHSE) is a shellcode emulator leveraging the Windows Hypervisor Platform API☆24Updated 3 years ago
- An example code of CiGetCertPublisherName☆17Updated 3 years ago
- ☆29Updated last year
- Load Dll into Kernel space☆38Updated 3 years ago
- Anti-Analysis technique, trick the debugger by Hiding events from it.☆20Updated 4 years ago
- windows kernel pagehook☆40Updated 3 years ago
- A poc that abuses Enclave☆40Updated 3 years ago