zodiacon / MinimalLinks
☆16Updated 2 years ago
Alternatives and similar repositories for Minimal
Users that are interested in Minimal are comparing it to the libraries listed below
Sorting:
- A native Windows library for intercepting kernel-to-user transitions using instrumentation callbacks☆20Updated last year
- Remote Thread Detection with a Kernel Driver☆30Updated 4 months ago
- An x64dbg plugin which helps make sense of long C++ symbols☆59Updated 2 years ago
- ☆25Updated 2 years ago
- SetWinEventHook Sample☆47Updated last year
- arbitrary kernel read/write in dbutil_2_3.sys, Proof of Concept Local Privilege Escalation to nt authority/system☆57Updated 3 years ago
- A fully compatible replacement of Windows NT NtCreateLowBoxToken syscall - precisely restored from reverse engineering☆36Updated 4 months ago
- ☆39Updated 3 months ago
- silence file system monitoring components by hooking their minifilters☆57Updated last year
- A compact tool for detecting AV/EDR hooks in default Windows libraries.☆31Updated 3 years ago
- Manually perform syscalls without going through any external API or DLL.☆18Updated 2 years ago
- Tiny driver patch to allow kernel callbacks to work on Win10 21h1☆34Updated 3 years ago
- Elevate arbitrary MSR writes to kernel execution.☆36Updated last year
- Example of building an application verifer DLL☆46Updated last year
- ☆59Updated 2 years ago
- Proof-of-concept game using VBS enclaves to protect itself from cheating☆40Updated 6 months ago
- Demo from the Malware Analysis and Development Webinar☆20Updated last year
- ☆18Updated 4 years ago
- Windows kernel driver template for cmkr and llvm-msvc.☆34Updated last year
- Compileable POC of namazso's x64 return address spoofer.☆52Updated 4 years ago
- An example of how to use Microsoft Windows Warbird technology☆28Updated 2 years ago
- Youtube channel sample code☆49Updated 2 weeks ago
- allowing um r/w through km from um ioctl ™☆11Updated 3 years ago
- UEFI bootkit: Hardware Implant. In-Progress☆15Updated 3 years ago
- kernel to user mode APC injector☆44Updated 3 years ago
- ☆29Updated 3 years ago
- ☆10Updated 3 years ago
- Safely manage the unloading of DLLs that have been hooked into a process. Context: https://github.com/KNSoft/KNSoft.SlimDetours/discussio…☆76Updated last month
- Signature finder (from PE-bear)☆36Updated last month
- Hijack NotifyRoutine for a kernelmode thread☆42Updated 3 years ago