rvrsh3ll / UnhookingPatch Public

forked from SaadAhla/UnhookingPatch

Notifications You must be signed in to change notification settings
Fork 0
Star 1

Bypass EDR Hooks by patching NT API stub, and resolving SSNs and syscall instructions at runtime

1 star 46 forks Branches Tags Activity

Notifications

Name		Name	Last commit message	Last commit date
Latest commit History 35 Commits
PatchingAPI		PatchingAPI
LICENSE		LICENSE
README.md		README.md
bin2mac.py		bin2mac.py
calc.bin		calc.bin

Repository files navigation

UnhookingPatch

Bypass EDR Hooks by patching NT API stub, and resolving SSNs and syscall instructions at runtime

How do i convert binary to MAC ?

Requirements:

macaddress

pip install macaddress
./bin2mac.py calc.bin

About

Bypass EDR Hooks by patching NT API stub, and resolving SSNs and syscall instructions at runtime

Report repository

Releases

No releases published

Packages

No packages published

Languages

C++ 95.2%
Python 4.8%