Hells Hollow Windows 11 Rootkit technique to Hook the SSDT via Alt Syscalls
Inline syscalls made for MSVC supporting x64 and WOW64
The project uses SSDT Hooking to bypass security checks during driver loading by hooking NtLoadDriver and modifying the PreviousMode flag.
[RO/Mirror] Windows XP x86-32 SSDT table hook
The project demonstrates a simple detection method for SSDT Hook in User Mode via BYOVD
This project demonstrates simply a ssdt unhooking technique via NtLoadDriver routine in Windows 11 X64.
Big data-driven reverse engineering and hook framework focused on Windows internals and kernel analysis. Supports static analysis, kernel drivers, SSDT and kernel hooking, self-protection mechanisms, and malware/rootkit research. Topics: reverse-engineering, malware-analysis, windows-kernel, windows-internals, kernel-driver, ssdt-hook, kernel-hook
To associate your repository with the ssdt-hook topic, visit your repo's landing page and select "manage topics."