okandok Goto Github PK

kernel_callbacks

Bypasses for Windows kernel callbacks PatchGuard protection

kernel_library

most of my utilities gathered in one repo to ease kernel development

kernel_payload_comms

A proof of concept demonstrating communication via mapped shared memory structures between a user-mode process and a kernel-mode payload on Windows 10 20H2.

kernel_window_hide

内核级别隐藏指定窗口

kernelreadwritememory

Simple code to manipulate the memory of a usermode process from kernel.

killpchunter_ntterminateprocess

模拟NtTerminateProcess的实现关闭PCHunter

kinghamlet

Process Ghosting Tool

km-to-um-injector

Kernel mode to user mode injector

km-um-communication

A somewhat wide collection of various kernelmode-usermode communication methods in one repository (mainly just for learning purposes).

kmac

Some usefull info when reverse engineering Kernel Mode Anti-Cheat

kprotect

Driver protect 驱动保护

krabsetw

KrabsETW provides a modern C++ wrapper and a .NET wrapper around the low-level ETW trace consumption functions.

krnl-gdi-render

ksocket

KSOCKET provides a very basic example how to make a network connections in the Windows Driver by using WSK

ktl

Windows Kernel Template Library

labs

latebros

x64 usermode rootkit

lazy_importer

library for importing functions from dlls in a hidden, reverse engineer unfriendly way

lazysight

Ironsight Internal Multihack

legend

A framework for hook java methods.

libbpf

Automated upstream mirror for libbpf stand-alone build.

libmem

Process & Memory Hacking Library (Windows/Linux/BSD/Android) (C/C++/Python) (x86/x64, ARM/ARM64) (Internal/External)

libmhyprot

A static library, wrapper for mhyprot vulnerable driver, execute exploits and tests

libpdb

Parser for Microsoft Program Database (PDB) files

libraryinjector

Load a library into newly spawned processes using EndpointSecurity

lightftp

Small x86-32/x64 FTP Server

little-anti-cheat

Anti-Cheat for Source Games

llvm-project

The LLVM Project is a collection of modular and reusable compiler and toolchain technologies. Note: the repository does not accept github pull requests at this moment. Please submit your patches at http://reviews.llvm.org.

loadimageinject

LoadImage Routine Inject Dll

loadlibrary

Porting Windows Dynamic Link Libraries to Linux