xuyun018 / LPC-Local-Procedure-Call-Links
LPC (Local Procedure Call) is a portion of Windows NT kernel, used for fast communication between threads or processes. It can be also used for communication between kernel mode and user mode components (e.g. between driver and user application). This article contains description and an example how to use LPC communication.
☆15Updated 4 years ago
Alternatives and similar repositories for LPC-Local-Procedure-Call-
Users that are interested in LPC-Local-Procedure-Call- are comparing it to the libraries listed below
Sorting:
- PDB Explorer 是一个能够查看微软 pdb 文件(Program DataBase,程序数据库)的工具,它能够将 pdb 文件中的 struct、union 及 enum 类型的定义以 C/C++ 的语法显示出来,特别适合 Windows 底层研究人员及 DDK …☆38Updated 10 years ago
- Inject dll to process in driver☆10Updated last year
- Windows Server 2K3 NT 5☆12Updated 4 years ago
- A simple example how to decrypt kernel debugger data block☆31Updated 4 years ago
- Driver Loader/BE Bypass/Win Malware(lol)☆36Updated 6 years ago
- A driver that supports communication between a Windows guest and HyperWin☆15Updated 4 years ago
- Visual Studio 2019 extension for building C/C++ projects with the LLVM Compiler Toolchain (installed separately).☆13Updated 4 years ago
- ☆38Updated 5 years ago
- The kernel mode Standard Template Library Template☆19Updated 5 years ago
- GUI ASM to HEX and HEX to ASM conversion tool☆18Updated 7 years ago
- ☆44Updated 7 years ago
- A drop-in replacement for the C++ STL for kernel mode Windows drivers. The goal is to have implementations for things like the standard a…☆32Updated 9 years ago
- x64 assembler library☆31Updated last year
- Very tiny and selective implementation of STL for Windows NT kernel mode drivers☆18Updated 4 years ago
- 对debughelp的二次开发☆11Updated 2 years ago
- Detects if a Kernel mode debugger is active by reading the value of KUSER_SHARED_DATA.KdDebuggerEnabled. It is a high level and portable …☆23Updated 8 years ago
- ntos internals☆22Updated 6 years ago
- Simple Demo of using Windows Hypervisor Platform☆29Updated 5 months ago
- MiniSDK☆10Updated 4 years ago
- Windows Console Monitor☆34Updated 6 years ago
- Windows ndiscap.sys adapter for WinPcap applications☆27Updated 9 years ago
- 粗暴地枚举管理内核的WFP对象。 Manage kernel WFPs in a brutal way.☆27Updated 7 years ago
- ETW Tracing C++ project☆16Updated 5 years ago
- A simple kernel mode driver that hooks some values at the KUSER_SHARED_DATA structure.☆27Updated 5 years ago
- Map memory to user space and manipulate user memory, using capmon☆24Updated 7 years ago
- ☆14Updated 6 years ago
- Black Signature Driver☆24Updated 2 years ago