vatsalmasrani Goto Github PK

syswhispers

AV/EDR evasion via direct system calls.

teamviewer_permissions_hook_v1

A proof of concept injectable C++ dll, that uses naked inline hooking and direct memory modification to change your TeamViewer permissions.

teaser-2017

threadspy

threathunter-playbook

A Threat hunter's playbook to aid the development of techniques and hypothesis for hunting campaigns.

umap

UEFI bootkit for driver manual mapping

unpackers

Collection of Compressor and Crypter unpackers

videos-bypassingavsbycsharp

Video files for eBook: "Bypassing AVs by C#.NET Programming"

visual-studio-projects

Holds all simple Visual Studio programs that I've created over the years.

wfp-traffic-redirection-driver

WFP Traffic Redirection Driver is used to redirect NIC traffic on network layer and framing layer, based on Windows Filtering Platform (WFP).

win-exploit

win-rootkit

win10

Win 10 related research

win32kescape

win64-rovnix-vbr-bootkit

Win64/Rovnix - Volume Boot Record Bootkit

windows-classic-samples

This repo contains samples that demonstrate the API used in Windows classic desktop applications.

windows-driver-development-internals

Windows 驱动开发技术详解 张帆 史彩成

windows-driver-docs-ddi

The official Windows Driver Kit DDI reference documentation sources

windows-internals

all the fun stuff that windows has to offer

windows-internals-1

My repository to upload drivers from different books and all the information related to windows internals.

windows-kernel-exploits

windows-kernel-exploits Windows平台提权漏洞集合

windows-kernel-explorer

A free but powerful Windows kernel research tool

windows-kernel-segmentheap-aligned-chunk-confusion

PoC exploiting Aligned Chunk Confusion on Windows kernel Segment Heap

windows-rootkits

windows.sandbox

Windows sandbox PoC

windows7_ipc

Windows 7 Process IPC

windows_kernel_address_leaks

Examples of leaking Kernel Mode information from User Mode on Windows

windows_kernel_resources

Papers, blogposts, tutorials etc for learning about Windows kernel exploitation, internals and (r|b)ootkits

windowscompositionsamples

Windows Composition Samples the place for getting the latest code samples and demos using Windows.UI.Xaml and Windows.UI.Composition to make beautiful Universal Windows Platform applications.

winipt

The Windows Library for Intel Process Trace (WinIPT) is a project that leverages the new Intel Processor Trace functionality exposed by Windows 10 Redstone 5 (1809), through a set of libraries and a command-line tool.