A Rust port of LayeredSyscall — performs indirect syscalls while generating legitimate API call stack frames by abusing VEH.
-
Updated
Oct 31, 2024 - Rust
A Rust port of LayeredSyscall — performs indirect syscalls while generating legitimate API call stack frames by abusing VEH.
三角洲行动 x64 范围辅助 DLL 源码,通过硬件断点与 Process Instrumentation Callback 在运行时替换目标浮点参数。
Correlating kernel notifications with the lack of ETW events to detect ETW Patching
A PICO for Crystal Palace that implements hardware breakpoint hooking.
Windows x64 VEH hook library with PageGuard and debug-register backends.
A demo of a Structured/Vectored Exception Handler hook using the Debug Registers to trigger an exception.
让 VProtect 加壳的《三国志曹操传》加强版 v2.20 在 Android Winlator 上运行:在 Wine ntdll 里软件模拟 x86 硬件断点(Dr1/Dr7),启动 72.1s → 22.2s。含补丁源码、构建脚本、技术报告与整合包。
To associate your repository with the hardware-breakpoint topic, visit your repo's landing page and select "manage topics."