Enumerate Callbacks and all Object Types
☆16Jan 9, 2023Updated 3 years ago
Alternatives and similar repositories for EAKC-EnumAllKernelCallbacks
Users that are interested in EAKC-EnumAllKernelCallbacks are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- create a um process that contains all physical memory☆20Jun 12, 2026Updated last month
- it's a driver injector or driver loader header lib(Windows)☆13Aug 5, 2023Updated 3 years ago
- research revolving the windows filtering platform callout mechanism☆42May 26, 2024Updated 2 years ago
- TS-Changer - Forces the machine in/out of TestSigning Mode at runtime.☆63Aug 14, 2023Updated 2 years ago
- Virtual and physical memory hacking library using gigabyte vulnerable driver☆70Mar 16, 2026Updated 4 months ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- ☆18Dec 18, 2020Updated 5 years ago
- POC about how to prevent windbg break☆15Oct 3, 2022Updated 3 years ago
- Some eternal WIP stuff :)☆21Nov 18, 2025Updated 8 months ago
- ☆20Feb 22, 2021Updated 5 years ago
- Write-ups and proof of concepts of design and implementaion of various modern malwares.☆30Feb 22, 2023Updated 3 years ago
- 内存分析中玩贪吃蛇☆15Jan 13, 2024Updated 2 years ago
- some AV / EDR / analysis studies☆10May 21, 2023Updated 3 years ago
- The code is a pingback to the Dark Vortex blog: https://0xdarkvortex.dev/hiding-memory-allocations-from-mdatp-etwti-stack-tracing/☆215Jan 29, 2023Updated 3 years ago
- A curated list of Rust code and resources. With repository stars⭐ and forks🍴☆16Updated this week
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- KDP compatible unsigned driver loader leveraging a write primitive in one of the IOCTLs of gdrv.sys☆170Jun 14, 2024Updated 2 years ago
- POC Hook of nt!HvcallCodeVa☆53May 8, 2023Updated 3 years ago
- Hooking the Windows usermode exception handler☆23Aug 13, 2024Updated last year
- x64 Windows implementation of virtual-address to physical-address translation☆54Jun 3, 2021Updated 5 years ago
- Source data & analysis of NSA SECONDDATE packet-injection framework☆11Apr 9, 2017Updated 9 years ago
- Fragging SS7 for fun and profit☆22Nov 3, 2021Updated 4 years ago
- hy-rs, pronounced high rise, provides a unified and portable to the hypervisor APIs provided by various platforms.☆20Mar 10, 2022Updated 4 years ago
- A kernel exploit leveraging NtUserHardErrorControl to elevate a thread to KernelMode and achieve arbitrary kernel R/W & more.☆59Sep 20, 2022Updated 3 years ago
- Inject code into .net applications☆14Nov 7, 2018Updated 7 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- UAC bypass abusing WinSxS in "wusa.exe". Referred from and similar to: https://github.com/L3cr0f/DccwBypassUAC , Kudos to L3cr0f and Fuz…☆31Jun 30, 2021Updated 5 years ago
- Demonstrate calling a kernel function and handle process creation callback against HVCI☆85Dec 21, 2022Updated 3 years ago
- Hook all callbacks which are registered with LdrRegisterDllNotification☆101Apr 3, 2025Updated last year
- Rust crate to obfuscate strings and byte arrays so they are not in memory when not in use.☆22Apr 30, 2026Updated 3 months ago
- The WebAssembly Indirect Call Inliner☆29Oct 18, 2023Updated 2 years ago
- ☆23Oct 15, 2024Updated last year
- The modifyed cjson that can running on windows kernel☆16Mar 21, 2023Updated 3 years ago
- Vulnerable driver research tool, result and exploit PoCs☆243Nov 1, 2023Updated 2 years ago
- Using Microsoft Warbird to automatically unpack and execute encrypted shellcode in ClipSp.sys without triggering PatchGuard☆269Aug 31, 2022Updated 3 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- CVE-2024-43451 is a Windows NTLM vulnerability that allows an attacker to force authentication and capture NTLM hashes by using malicious…☆15Jan 21, 2025Updated last year
- Application Verifier Dynamic Fault Injection☆42Jan 12, 2026Updated 6 months ago
- Overview of Microsoft Patch Tuesday☆14Sep 13, 2024Updated last year
- Modified version of Impacket to use dynamic NTLMv2 Challenge/Response☆20Dec 26, 2022Updated 3 years ago
- A Dropper POC with a focus on aiding in EDR evasion, NTDLL Unhooking followed by loading ntdll in-memory, which is present as shellcode (…☆178Feb 10, 2023Updated 3 years ago
- RemoveApiSets is a program that can replace the ApiSets Dlls that already depend on ApiSets Dlls with MSVCR14X Dlls☆33Oct 6, 2024Updated last year
- AD Pentest Cheatsheet by BlackWasp☆26Oct 10, 2022Updated 3 years ago