orwhite-y Goto Github PK

kvm-guest-drivers-windows

Windows paravirtualized

learn-kvm

Qemu KVM(Kernel Virtual Machine)学习笔记

learn-windows-drivers

Windows drivers 开发的各个基础示例，包含进程、内存、注册表、回调等管理

leetcode-master

《代码随想录》LeetCode 刷题攻略：200道经典题目刷题顺序，共60w字的详细图解，视频难点剖析，50余张思维导图，支持C++，Java，Python，Go，JavaScript等多语言版本，从此算法学习不再迷茫！🔥🔥 来看看，你会发现相见恨晚！🚀

libevt

Library and tools to access the Windows Event Log (EVT) format

lilypublic

linux-0.11

the source code of linux-0.11 for study linux kernel

linuxtq

《Linux提权方法论》

lviewplus64

LView Fork

magicwall

masterhide

A x64 Windows Rootkit using SSDT or Hypervisor hook

memloader

内存加载PE文件

memorymodule

Library to load a DLL from memory.

memorymodulepp

MemoryModule which compatible with Win32 API and support exception handling

miasm

Reverse engineering framework in Python

minhook

The Minimalistic x86/x64 API Hooking Library for Windows

ncx_mempool

a nginx-based memory pool . both share-memory and private-memory are supported. it is more efficient than malloc

newhidedriverex

Hide Driver By MiProcessLoaderEntry

ntoskrnl

The Windows Research Kernel (WRK)

obregistercallbacksbypass

Modify process handle permissions

ollydbg1plugins

openark

OpenArk is a open source anti-rookit(Ark) tool on Windows.

oxgenpdb

a Windows kernel Pdb parsing and downloading library that running purely in kernel mode without any R3 programs.

p2p_work_on_kcp

UDP外网穿透+KCP组合传输

powerloaderex

PowerLoaderEx - Advanced Code Injection Technique for x32 / x64

powervim

Make your vim more power and much easer.

pplkiller

Tool to bypass LSA Protection (aka Protected Process Light)

processprotect

基于ObRegisterCallbacks实现简单进程保护功能

protect_process

ptbypass-poc

Bypassing code hooks detection in modern anti-rootkits via building faked PTE entries.