trailofbits / HVCI-loldrivers-check
☆53Updated last year
Alternatives and similar repositories for HVCI-loldrivers-check:
Users that are interested in HVCI-loldrivers-check are comparing it to the libraries listed below
- Winbindex bot to pull in binaries for specific releases☆48Updated last year
- Aplos an extremely simple fuzzer for Windows binaries.☆68Updated 2 months ago
- ☆71Updated 2 years ago
- call gates as stable comunication channel for NT x86 and Linux x86_64☆31Updated last year
- Implementation of an export address table protection mitigation, like Export Address Filtering (EAF)☆100Updated last year
- ☆24Updated last year
- A set of rootkit-like abilities for unprivileged users, and vulnerabilities based on the DOT-to-NT path conversion known issue☆98Updated last year
- ☆111Updated 2 years ago
- A Poc on blocking Procmon from monitoring network events☆101Updated 2 years ago
- C# Utilities for Windows Notification Facility☆150Updated 3 weeks ago
- lib-nosa is a minimalist C library designed to facilitate socket connections through AFD driver IOCTL operations on Windows.☆109Updated 8 months ago
- Contains all the applications developed for the Second part of the 7th Edition of Windows Internals book☆108Updated 10 months ago
- Finding Truth in the Shadows☆92Updated 2 years ago
- a tiny program to consume from ETW providers for research☆47Updated 4 months ago
- A few examples of how to trap virtual memory access on Windows.☆30Updated 4 months ago
- Simple dotnet Native AOT app that uses AsmResolver to convert shellcode to PE☆65Updated 2 years ago
- Fork of Get-InjectedThread - https://gist.github.com/jaredcatkinson/23905d34537ce4b5b1818c3e6405c1d2☆40Updated last year
- Monitors ETW for security relevant syscalls maintaining the set called by each unique process☆76Updated last year
- ☆74Updated 9 months ago
- ☆156Updated 2 weeks ago
- Safely manage the unloading of DLLs that have been hooked into a process. Context: https://github.com/KNSoft/KNSoft.SlimDetours/discussio…☆75Updated last week
- Slides for COM Hijacking AV/EDR Talk on 38c3☆73Updated 4 months ago
- Minifilter Callback Patching Proof-of-Concept☆71Updated 2 years ago
- Easy encrypt/decrypt data with TPM☆25Updated last year
- ☆45Updated last month
- Combining Sealighter with unpatched exploits to run the Threat-Intelligence ETW Provider☆171Updated 2 years ago
- ☆18Updated last year
- ☆105Updated 6 months ago
- Small tool to play with IOCs caused by Imageload events☆42Updated last year
- HEVD Exploit: ArbitraryWrite on Windows 10 22H2 - Bypassing KVA Shadow and SMEP via PML4 Entry Manipulation☆26Updated 10 months ago