monitors hidden syscalls called from call of duty anticheat
☆88Jan 13, 2025Updated last year
Alternatives and similar repositories for hidden_syscall_monitoring
Users that are interested in hidden_syscall_monitoring are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- A template programming library for Kernel Mode Windows drivers.☆13Jul 12, 2016Updated 10 years ago
- Manually maps a DLL & replaces a target process's entry point.☆23Mar 1, 2025Updated last year
- User mode C++ tool for detecting UEFI drivers, bootkit malware and modifications by checking the Windows bootloader and managing BCD☆13Sep 6, 2024Updated 2 years ago
- A basic implementation of Patch Guard that I implemented, that includes integrity checks and other protection mechanisms I added.☆79Sep 26, 2026Updated last month
- Sample/PoC Windows kernel driver for detect DMA devices by using Vendor ID and Device ID signatures☆38Sep 22, 2024Updated 2 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- ☆38Sep 29, 2026Updated last month
- InfinityHookProMax: Make InfinityHook great great again☆52Aug 25, 2023Updated 3 years ago
- ☆18Mar 28, 2023Updated 3 years ago
- Single header code that sets any section's page to No Access☆11Feb 15, 2022Updated 4 years ago
- A fully compatible replacement of Windows NT NtCreateLowBoxToken syscall - precisely restored from reverse engineering☆46Jun 10, 2025Updated last year
- CMake template for a basic EFI application/bootkit. This library is header-only, there is no EDK2 runtime!).☆80Sep 18, 2022Updated 4 years ago
- it's a driver injector or driver loader header lib(Windows)☆13Aug 5, 2023Updated 3 years ago
- WinVisor - A hypervisor-based emulator for Windows x64 user-mode executables using Windows Hypervisor Platform API☆673Jan 23, 2025Updated last year
- clearing traces of a loaded driver☆48Jul 2, 2022Updated 4 years ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- Detect WFP filters blocking EDR communications☆99Jan 5, 2024Updated 2 years ago
- partially disable patchguard up to win11 21H2☆21Jun 3, 2024Updated 2 years ago
- ☆32Apr 2, 2026Updated 7 months ago
- Using ReadDirectoryChangesW to detect CheatEngine☆53Jun 7, 2022Updated 4 years ago
- Single header version of System Informer's phnt library.☆251Mar 27, 2026Updated 7 months ago
- Windows capability development using GCC and GNU Make☆23Nov 1, 2025Updated last year
- WinDbg plugin to trace module transitions from a debugged driver.☆54Dec 22, 2025Updated 10 months ago
- Hooking Windows' exception dispatcher to protect process's PML4☆276Jan 24, 2025Updated last year
- HyperDeceit is the ultimate all-in-one library that emulates Hyper-V for Windows, giving you the ability to intercept and manipulate oper…☆388Jun 3, 2023Updated 3 years ago
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- Windows Console Monitor☆35Jun 11, 2019Updated 7 years ago
- Folder Or File Delete to Get System Shell on Current Session Desktop☆49Jan 14, 2025Updated last year
- anti-ransomware file-system filter☆70Sep 3, 2024Updated 2 years ago
- ☆91Jun 2, 2024Updated 2 years ago
- Demo proof of concept for shadow regions, and implementation of HyperDeceit.☆323May 31, 2023Updated 3 years ago
- Hooking the Windows usermode exception handler☆22Aug 13, 2024Updated 2 years ago
- ☆37Nov 8, 2024Updated last year
- bootkit驱动映射，三环进程注入加载指定模块☆16Oct 8, 2024Updated 2 years ago
- Integration of Microsoft Warbird with the MSVC compiler☆137Jul 16, 2023Updated 3 years ago
- Serverless GPU API endpoints on Runpod - Get Bonus Credits • AdSkip the infrastructure headaches. Auto-scaling, pay-as-you-go, no-ops approach lets you focus on innovating your application.
- FastSymApi - A Fast API PDB Symbol Cache Server that efficiently caches and compresses PDBs on disk for quick and repeated retrieval.☆18Sep 19, 2026Updated last month
- Bring Your Own Vulnerable Driver for PatchGuard & Driver Signature Enforcement☆14Apr 6, 2024Updated 2 years ago
- mouseclassservicecallback detection via hook☆54Feb 7, 2022Updated 4 years ago
- windows rpc 使用MIDL+RPC实现HelloWorld☆24Mar 21, 2018Updated 8 years ago
- Walks the CFG bitmap to find previously executable but currently hidden shellcode regions☆141May 17, 2023Updated 3 years ago
- LPC (Local Procedure Call) is a portion of Windows NT kernel, used for fast communication between threads or processes. It can be also us…☆17Mar 21, 2021Updated 5 years ago
- FFXIV network proxy library☆22Feb 18, 2026Updated 8 months ago