s18leoare / Hackshield-Driver-Bypass

Bypass HackShield several specific SSDT hook in Ring0

Hackshield Bypass for Windows Xp/7

Windows Driver Source

Building environment : WDK 7600.16385.1
Platform : Windows XP/7 x86

Bypass several specific ssdt hook after loading EagleXNT.sys

• NtOpenProcess
• NtReadVirtualMemory
• NtWriteVirtualMemory
• NtProtectVirtualMemory