☆84Apr 1, 2022Updated 3 years ago
Alternatives and similar repositories for PresentHookDetection
Users that are interested in PresentHookDetection are comparing it to the libraries listed below
Sorting:
- ☆82Aug 17, 2021Updated 4 years ago
- BattlEye shellcodes tester☆151Jan 3, 2022Updated 4 years ago
- Code for Battleyes shellcode☆239Nov 11, 2021Updated 4 years ago
- Detect removed thread from PspCidTable.☆75Mar 18, 2022Updated 3 years ago
- ☆82Mar 20, 2022Updated 3 years ago
- UM-KM Communication using registry callbacks☆39Jun 8, 2020Updated 5 years ago
- mouseclassservicecallback detection via hook☆52Feb 7, 2022Updated 4 years ago
- base for testing☆186Sep 28, 2024Updated last year
- ☆192Dec 8, 2021Updated 4 years ago
- ☆43Oct 19, 2021Updated 4 years ago
- usermode driver mapper that forcefully loads any signed kernel driver (legit cert) with a big enough section (example: .data, .rdata) to …☆470Jan 3, 2022Updated 4 years ago
- ☆158May 21, 2024Updated last year
- Old way for blocking NMI interrupts☆29Sep 6, 2022Updated 3 years ago
- ☆136Aug 6, 2022Updated 3 years ago
- Using SetWindowHookEx for preinjected DLL's☆57Aug 25, 2022Updated 3 years ago
- ☆34Apr 11, 2023Updated 2 years ago
- ☆29Dec 29, 2022Updated 3 years ago
- Plugin for ReClass.Net (using vulnerable driver to read process memory)☆94Jan 2, 2020Updated 6 years ago
- ☆224May 10, 2022Updated 3 years ago
- Detect-KeAttachProcess by iterating through all processes as well as checking the context of the thread.☆121Feb 8, 2022Updated 4 years ago
- my own implementation cz yes☆99Oct 18, 2021Updated 4 years ago
- noob hooking dwm for overlay☆84Nov 24, 2020Updated 5 years ago
- Hygieia, a vulnerable driver traces scanner written in C++ as an x64 Windows kernel driver.☆151Feb 12, 2022Updated 4 years ago
- windows kernel pagehook☆41Oct 30, 2022Updated 3 years ago
- Patches DSE by swapping both data ptrs located in SeValidateImageHeader && SeValidateImageData☆22Feb 9, 2024Updated 2 years ago
- Manual mapper that uses PTE manipulation, Virtual Address Descriptor (VAD) manipulation, and forceful memory allocation to hide executabl…☆385Jan 29, 2022Updated 4 years ago
- ☆82Apr 23, 2024Updated last year
- How to use PiDqSerializationWrite. Introduces how to safely read and write from mapped driver☆26May 29, 2023Updated 2 years ago
- undetected eac mapper☆170May 3, 2022Updated 3 years ago
- ☆18Feb 5, 2025Updated last year
- Walks through the 4-level paging structures in Windows x64☆13Feb 12, 2023Updated 3 years ago
- Disks for DMA☆141Apr 28, 2021Updated 4 years ago
- manually map driver for a signed driver memory space☆174Mar 11, 2021Updated 4 years ago
- 09/2021 reversal of EasyAntiCheat driver☆235Dec 21, 2021Updated 4 years ago
- A mapper that maps shellcode into loaded large page drivers☆324Apr 26, 2022Updated 3 years ago
- i stole this from some guys private repo on github☆58Jul 11, 2021Updated 4 years ago
- Discarded Section Manual Map☆70Jun 18, 2020Updated 5 years ago
- ☆47Nov 26, 2020Updated 5 years ago
- A proof of concept demonstrating instrumentation callbacks on Windows 10 21h1 with a TLS variable to ensure all syscalls are caught.☆155Nov 14, 2021Updated 4 years ago