zodiacon / KObjects
Sample for Creating a new kernel object type and supporting API
☆23Updated 6 months ago
Alternatives and similar repositories for KObjects:
Users that are interested in KObjects are comparing it to the libraries listed below
- Debug Print viewer (user and kernel)☆65Updated last year
- Example of building an application verifer DLL☆45Updated 9 months ago
- SetWinEventHook Sample☆46Updated last year
- Bypassing kernel patch protection runtime☆20Updated 2 years ago
- View Windows System in action☆40Updated last week
- ☆26Updated 3 years ago
- ☆14Updated 6 months ago
- Generate a PDB file given the old PDB file and an address mapping☆42Updated 2 weeks ago
- ☆15Updated 7 months ago
- Reimplement CreateProcessInternalW via Windows 10 20H1+/Windows 11 Base on NtCreateUserProcess-Post☆56Updated 6 months ago
- Remote Thread Detection with a Kernel Driver☆29Updated 2 months ago
- Windows driver template, using C++20 & cmake & GithubActions☆20Updated 7 months ago
- ☆14Updated last year
- Helper Script to convert a Windbg dumped structure (using the 'dt' command) into a C structure. It creates dummy structs for you if neede…☆26Updated last year
- Header-only C++ library for producing PE files.☆31Updated last year
- Process Creation, Image Load and Thread Creation Notification☆12Updated last year
- Elevate arbitrary MSR writes to kernel execution.☆32Updated last year
- ☆45Updated 3 months ago
- research revolving the windows filtering platform callout mechanism☆31Updated 10 months ago
- ☆25Updated 2 years ago
- Windows kernel driver template for cmkr and llvm-msvc.☆34Updated last year
- An example of how to use Microsoft Windows Warbird technology☆27Updated last year
- silence file system monitoring components by hooking their minifilters☆56Updated last year
- Sample/PoC Windows kernel driver for detect DMA devices by using Vendor ID and Device ID signatures☆33Updated 6 months ago
- Application Verifier Dynamic Fault Injection☆36Updated 2 weeks ago
- Hook all callbacks which are registered with LdrRegisterDllNotification☆85Updated 2 years ago
- Proof-of-concept game using VBS enclaves to protect itself from cheating☆39Updated 4 months ago
- A native Windows library for intercepting kernel-to-user transitions using instrumentation callbacks☆17Updated last year
- Experiment to use sections as User/Kernelmode comm vector☆20Updated last year
- Samples from my book Windows Native API programming☆60Updated this week