A Rust port of LayeredSyscall — performs indirect syscalls while generating legitimate API call stack frames by abusing VEH.
-
Updated
Oct 31, 2024 - Rust
A Rust port of LayeredSyscall — performs indirect syscalls while generating legitimate API call stack frames by abusing VEH.
三角洲行动 x64 范围辅助 DLL 源码,通过硬件断点与 Process Instrumentation Callback 在运行时替换目标浮点参数。
Bypassing all EDR hooks while maintaining the cleanest callstack of all time with proxy calls and an exception handler.
Correlating kernel notifications with the lack of ETW events to detect ETW Patching
A PICO for Crystal Palace that implements hardware breakpoint hooking.
A demo of a Structured/Vectored Exception Handler hook using the Debug Registers to trigger an exception.
Windows x64 VEH hook library with PageGuard and debug-register backends.
To associate your repository with the hardware-breakpoint topic, visit your repo's landing page and select "manage topics."