Enumerate Callbacks and all Object Types
☆16Jan 9, 2023Updated 3 years ago
Alternatives and similar repositories for EAKC-EnumAllKernelCallbacks
Users that are interested in EAKC-EnumAllKernelCallbacks are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- create a um process that contains all physical memory☆21Jun 12, 2026Updated 3 months ago
- it's a driver injector or driver loader header lib(Windows)☆13Aug 5, 2023Updated 3 years ago
- research revolving the windows filtering platform callout mechanism☆41May 26, 2024Updated 2 years ago
- TS-Changer - Forces the machine in/out of TestSigning Mode at runtime.☆63Aug 14, 2023Updated 3 years ago
- Virtual and physical memory hacking library using gigabyte vulnerable driver☆71Mar 16, 2026Updated 6 months ago
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- ☆18Dec 18, 2020Updated 5 years ago
- Some eternal WIP stuff :)☆21Nov 18, 2025Updated 10 months ago
- POC about how to prevent windbg break☆15Oct 3, 2022Updated 4 years ago
- ☆20Feb 22, 2021Updated 5 years ago
- Write-ups and proof of concepts of design and implementaion of various modern malwares.☆29Feb 22, 2023Updated 3 years ago
- 内存分析中玩贪吃蛇☆15Jan 13, 2024Updated 2 years ago
- some AV / EDR / analysis studies☆10May 21, 2023Updated 3 years ago
- The code is a pingback to the Dark Vortex blog: https://0xdarkvortex.dev/hiding-memory-allocations-from-mdatp-etwti-stack-tracing/☆218Jan 29, 2023Updated 3 years ago
- A curated list of Rust code and resources. With repository stars⭐ and forks🍴☆17Updated this week
- Simple, predictable pricing with DigitalOcean hosting • AdAlways know what you'll pay with monthly caps and flat pricing. Enterprise-grade infrastructure trusted by 600k+ customers.
- KDP compatible unsigned driver loader leveraging a write primitive in one of the IOCTLs of gdrv.sys☆171Jun 14, 2024Updated 2 years ago
- POC Hook of nt!HvcallCodeVa☆55May 8, 2023Updated 3 years ago
- Hooking the Windows usermode exception handler☆22Aug 13, 2024Updated 2 years ago
- x64 Windows implementation of virtual-address to physical-address translation☆54Jun 3, 2021Updated 5 years ago
- Source data & analysis of NSA SECONDDATE packet-injection framework☆11Apr 9, 2017Updated 9 years ago
- Fragging SS7 for fun and profit☆22Nov 3, 2021Updated 4 years ago
- hy-rs, pronounced high rise, provides a unified and portable to the hypervisor APIs provided by various platforms.☆20Mar 10, 2022Updated 4 years ago
- Dumps VAC(Valve Anti-Cheat) modules that get streamed and mapped while playing a VAC protected game☆10Apr 13, 2025Updated last year
- A kernel exploit leveraging NtUserHardErrorControl to elevate a thread to KernelMode and achieve arbitrary kernel R/W & more.☆59Sep 20, 2022Updated 4 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Inject code into .net applications☆14Nov 7, 2018Updated 7 years ago
- Demonstrate calling a kernel function and handle process creation callback against HVCI☆86Dec 21, 2022Updated 3 years ago
- UAC bypass abusing WinSxS in "wusa.exe". Referred from and similar to: https://github.com/L3cr0f/DccwBypassUAC , Kudos to L3cr0f and Fuz…☆31Jun 30, 2021Updated 5 years ago
- Rust crate to obfuscate strings and byte arrays so they are not in memory when not in use.☆22Apr 30, 2026Updated 5 months ago
- The WebAssembly Indirect Call Inliner☆29Oct 18, 2023Updated 2 years ago
- Hook all callbacks which are registered with LdrRegisterDllNotification☆102Apr 3, 2025Updated last year
- ☆23Oct 15, 2024Updated last year
- The modifyed cjson that can running on windows kernel☆16Mar 21, 2023Updated 3 years ago
- Vulnerable driver research tool, result and exploit PoCs☆242Nov 1, 2023Updated 2 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Using Microsoft Warbird to automatically unpack and execute encrypted shellcode in ClipSp.sys without triggering PatchGuard☆270Aug 31, 2022Updated 4 years ago
- CVE-2024-43451 is a Windows NTLM vulnerability that allows an attacker to force authentication and capture NTLM hashes by using malicious…☆15Jan 21, 2025Updated last year
- Application Verifier Dynamic Fault Injection☆42Aug 18, 2026Updated last month
- Overview of Microsoft Patch Tuesday☆14Sep 13, 2024Updated 2 years ago
- Modified version of Impacket to use dynamic NTLMv2 Challenge/Response☆20Dec 26, 2022Updated 3 years ago
- A Dropper POC with a focus on aiding in EDR evasion, NTDLL Unhooking followed by loading ntdll in-memory, which is present as shellcode (…☆177Feb 10, 2023Updated 3 years ago
- RemoveApiSets is a program that can replace the ApiSets Dlls that already depend on ApiSets Dlls with MSVCR14X Dlls☆33Oct 6, 2024Updated 2 years ago