eroniko's starred repositories
safetyhook
C++23 procedure hooking library.
InfinityHookPro
InfinityHookPro Win7 -> Win11 latest
dokan-delphi
Dokan Delphi Wrapper
firmware-variables
Python library for controlling UEFI variables in Windows.
windows-kernel-file-delete
Force a file delete using a windows kernel driver
windows-kernel-file-protector
Protect a file from being deleted using windows kernel file system minifilter driver
IAT_patcher
Persistent IAT hooking application - based on bearparser
awesome-windows-kernel-security-development
windows kernel security development
multiscanner
Modular file scanning/analysis framework
IDTHook-x86
Detour hooking IRQ1 ISR through IDT (Interrupt Descriptor Table)
inline-syscall
Inline syscalls made for MSVC supporting x64 and WOW64
InfinityHook
Hook system calls, context switches, page faults and more.
IRPMon
The goal of the tool is to monitor requests received by selected device objects or kernel drivers. The tool is quite similar to IrpTracker but has several enhancements. It supports 64-bit versions of Windows (no inline hooks are used, only moodifications to driver object structures are performed) and monitors IRP, FastIo, AddDevice, DriverUnload and StartIo requests.
WindowsSpyBlocker
Block spying and tracking on Windows
SecureDelete-Algorithms
A a collection of secure delete algorithms in a CLI that can be used to overwrite data in a way that makes it difficult or impossible to recover. The algorithms included in this collection are zero-fill, DoD 5220.22-M, and random data.
KasperskyHook
Hook system calls on Windows by using Kaspersky's hypervisor