Enumerate Callbacks and all Object Types
☆17Jan 9, 2023Updated 3 years ago
Alternatives and similar repositories for EAKC-EnumAllKernelCallbacks
Users that are interested in EAKC-EnumAllKernelCallbacks are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- create a um process that contains all physical memory☆21Jun 12, 2026Updated 4 months ago
- Idiomatic Rust Bindings for Windows Hypervisor Platform☆13Apr 11, 2026Updated 6 months ago
- EQGRP: Replicating DarkPulsar, an DLL capable of hooking Security Package Method Tables on the Heap!☆15Oct 11, 2020Updated 6 years ago
- ☆18Dec 18, 2020Updated 5 years ago
- UAC bypass abusing WinSxS in "wusa.exe". Referred from and similar to: https://github.com/L3cr0f/DccwBypassUAC , Kudos to L3cr0f and Fuz…☆31Jun 30, 2021Updated 5 years ago
- Proton VPN Special Offer - Get 70% off • AdSpecial partner offer. Trusted by over 100 million users worldwide. Tested, Approved and Recommended by Experts.
- Header-only compile-time string obfuscation for C++, hiding literals from static analysis and reacting to debuggers at runtime.☆15Oct 5, 2026Updated 3 weeks ago
- header only library for NtLoadDriver/NtUnloadDriver.☆11Sep 8, 2020Updated 6 years ago
- User mode C++ tool for detecting UEFI drivers, bootkit malware and modifications by checking the Windows bootloader and managing BCD☆13Sep 6, 2024Updated 2 years ago
- From 2011: Quickly search for files in NTFS volumes parsing the Master File Table (MFT). A decent amount of how NTFS and MFT work was pai…☆28Oct 14, 2019Updated 7 years ago
- Some eternal WIP stuff :)☆20Nov 18, 2025Updated 11 months ago
- research revolving the windows filtering platform callout mechanism☆42May 26, 2024Updated 2 years ago
- Code Integrity Violation Spotter☆17Jun 11, 2024Updated 2 years ago
- My notes about the stub.dll obfuscator.☆55Dec 12, 2025Updated 10 months ago
- An MCP server wrapping `kd.exe` for Windows kernel debugging☆17May 13, 2026Updated 5 months ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Virtual and physical memory hacking library using gigabyte vulnerable driver☆72Mar 16, 2026Updated 7 months ago
- ☆20Feb 22, 2021Updated 5 years ago
- HVCI/kCET-aware bugcheck suppressor PoC☆21May 11, 2026Updated 5 months ago
- Windows capability development using GCC and GNU Make☆23Nov 1, 2025Updated 11 months ago
- some AV / EDR / analysis studies☆10May 21, 2023Updated 3 years ago
- 内存分析中玩贪吃蛇☆15Jan 13, 2024Updated 2 years ago
- Thats it! An Open-Source Windows UEFI Rootkit☆42Jul 19, 2025Updated last year
- Source code on the 1.44MB 3.5 floppy accompanying the Windows NT File System Internals book.☆20Jul 31, 2019Updated 7 years ago
- ☆40Mar 23, 2023Updated 3 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- TS-Changer - Forces the machine in/out of TestSigning Mode at runtime.☆63Aug 14, 2023Updated 3 years ago
- Crystal Palace library for proxying Nt API calls via the Threadpool. Updated for call gadgets.☆23Nov 11, 2025Updated 11 months ago
- ☆19Oct 31, 2022Updated 3 years ago
- Detour hooking IRQ1 ISR through IDT (Interrupt Descriptor Table)☆21Mar 16, 2026Updated 7 months ago
- Hook syscalls from ring0 without triggering PatchGuard☆33Oct 29, 2025Updated last year
- hidden_syscall - syscaller without using syscall instruction in code☆68Jan 23, 2023Updated 3 years ago
- Source data & analysis of NSA SECONDDATE packet-injection framework☆11Apr 9, 2017Updated 9 years ago
- Mockingjay Process Injection Vulnerable DLL Finder☆21Jun 30, 2023Updated 3 years ago
- A multi-staged malware that contains a kernel mode rootkit and a remote system shell.☆72May 20, 2021Updated 5 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Pinjectra is a C/C++ OOP-like library that implements Process Injection techniques (with focus on Windows 10 64-bit)☆16Sep 4, 2020Updated 6 years ago
- Full reversing of the Microsoft Auxiliary Windows API Library and ported to C☆22Dec 17, 2024Updated last year
- Hook all callbacks which are registered with LdrRegisterDllNotification☆102Apr 3, 2025Updated last year
- ☆21Jun 3, 2021Updated 5 years ago
- hy-rs, pronounced high rise, provides a unified and portable to the hypervisor APIs provided by various platforms.☆20Mar 10, 2022Updated 4 years ago
- Basic experimentation with Windows drivers.☆19Mar 3, 2023Updated 3 years ago
- Walks the Process' VAD list to grab the PTE's corresponding to a usermode virtual address, all to get the physical address☆23Nov 22, 2021Updated 4 years ago