zhuhuibeishadiao/NewHideDriverEx

Stars
262
Rank 156,136 (Top 4 %)
Language
C
Created almost 7 years ago
Updated over 5 years ago

zhuhuibeishadiao/NewHideDriverEx

zhuhuibeishadiao

There are no reviews yet. Be the first to send feedback to the community and the maintainers!

Hide Driver By MiProcessLoaderEntry

NewHideDriverEx

Hide Driver By MiProcessLoaderEntry (no trigger patchguard)

Support SEH (>= win10 15063 trigger patchguard)

Tested

win7 x64

win10 14393 x64

win10 15063 x64

win10 16299 x64

This project only provides ideas and will not be updated.

Focus on projects that have been updated:

https://github.com/Sqdwr/HideDriver

PFHook

Page fault hook use ept (Intel Virtualization Technology)

ntoskrnl

The Windows Research Kernel (WRK)

PatchGuardResearch

win10 pgContext dynamic dump (btc version)

MiniVTx64

Intel Virtualization Technology demo

JunkDriveOpenSource

Some garbage drivers written for getting started

exploit-RemoteDesktopServerDriver

exploit termdd.sys(support kb4499175)

PathModification

Process path modification x64

ObRegisterCallBacksByPass

UserMemoryOperation64

Map memory to user space and manipulate user memory, using capmon

KernelHooksDetection_x64

x64 Kernel Hooks Detection

Tdx

FixFileCheckSumTool

fix file check sum

mystudy

r0-rkit

R0 Kern > R3 User Rootkit

CsolLaunchTools

NT4Src_Modify

ClosersLaunchTools

WinDorks

WinDorks; This repo contains loads of the windows operating system internals that i collected from many sources. In addition it contains a wdm.h overide For overiding windows drivers, The solution is maid with vs 2017, (Mbed), and it compiles, so you can override wdm safe functions to have fun with the OS. enjoy.