Skip to content

v2.0

Choose a tag to compare

View all tags
@slep2-0 slep2-0 released this 12 Jul 20:03
· 33 commits to master since this release
hooking
d2c4d3c
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

New Features:

Function Hooking introduced.

Hooking abilities for now:
Block an address from MmIsAddressValid - Will always return false (block ranges).
Block a PID from being accessed in PsLookupProcessByProcessId - Kernel and drivers that use this function WONT be able to interact with the process bearing the PID. -- This includes this rootkit. (Process Hiding and Process Elevation, Process Protection (Bugcheck version only) , and HideDLL will NOT work on the PID the hook is placed on)

Please give me more ideas for hooking! Soon I will bring the actual good part of the hooking, hooking the registry, hiding files, hooking connections (TCP/UDP), and more.

Assets 5
Loading