wei858910 Goto Github PK

hidden

🇺🇦 Windows driver with usermode interface which can hide processes, file-system and registry objects, protect processes and etc

hide-fs

Inject dll to explorer.exe and hide file from process.

hidedll

Hide DLL / Hide Module / Hide Dynamic Link Library

hideprocess

A basic Direct Kernel Object Manipulation rootkit that removes a process from the EPROCESS list, hiding it from the Task Manager

hideprocesshook

DLL that hooks the NtQuerySystemInformation API and hides a process name

hookwolf

hook detector

hp-socket

High Performance TCP/UDP/HTTP Communication Component

hygieia

Hygieia, a vulnerable driver traces scanner written in C++ as an x64 Windows kernel driver.

hyperdbg

The Source Code of HyperDbg Debugger 🐞

hyperhide

Hypervisor based anti anti debug plugin for x64dbg

imgui

Dear ImGui: Bloat-free Graphical User interface for C++ with minimal dependencies

infinityhookpro

InfinityHookPro Win7 -> Win11 latest

inject_hook_mfc_asm

32_64位 的Hook 和线程注入, MFC的DLL注入工具

injectall

Tutorial that demonstrates how to code a Windows driver to inject a custom DLL into all running processes. I coded it from start to finish using C++ and x86/x64 Assembly language in Microsoft Visual Studio. The solution includes a kernel driver project, a DLL project and a C++ test console project.

injectdlltool

多功能DLL注入工具：远程线程注入、消息钩子注入、输入法注入、APC注入、EIP注入、注册表注入。Multifunctional DLL injection tools: remote thread injection, message hook injection, input method injection, APC injection, EIP injection, registry injection.

injection

Windows process injection methods

introducing-mechanisms-apis-memory-management

Source Code for 'Introducing Mechanisms and APIs for Memory Management' by Roger Villela

ioctl-hook

realExtern.sys driver

jadx

Dex to Java decompiler

jj20_web_picture_download

www.jj20.com网页图片下载程序

json

JSON for Modern C++

kbot

League of Legends external script with kernel memory reading

kbotext

Application that sends custom requests to League of Legends LCU api

kdbg

The windows kernel debugger consists of two parts, KMOD which is the kernel driver handling ring3 request and KCLI; the command line interface for the driver. It originated due to insufficient useability with CheatEngine's DBVM driver while debugging games running under certain AntiCheat software.

kdmapper

KDMapper is a simple tool that exploits iqvw64e.sys Intel driver to manually map non-signed drivers in memory

kernel-anit-anit-debug-plugins

Kernel Anit Anit Debug Plugins 内核反反调试插件

kernel-anticheat

kernel-driver-read-write-memory-gdi-overlay

This driver hooks a function from NT and thus you can read/write memory and use windows GDI to draw on buffer from kernel.

kernel-force-delete

force delete runing .exe application file.or delete any locked file

kernel-memory-reading-writing

🔍 Code to read / write the Process Memory from the Kernel 🔧