├── .gitattributes ├── .gitignore ├── CheckKernelEATHook ├── CheckKernelHook │ ├── CheckKernelHook.exe │ ├── CheckKernelHook.sln │ ├── CheckKernelHook.suo │ └── CheckKernelHook │ │ ├── AddService.cpp │ │ ├── AddService.h │ │ ├── CheckKernelHook.aps │ │ ├── CheckKernelHook.cpp │ │ ├── CheckKernelHook.h │ │ ├── CheckKernelHook.rc │ │ ├── CheckKernelHook.vcxproj │ │ ├── CheckKernelHook.vcxproj.filters │ │ ├── CheckKernelHook.vcxproj.user │ │ ├── CheckKernelHookDlg.cpp │ │ ├── CheckKernelHookDlg.h │ │ ├── res │ │ ├── CheckKernelHook.ico │ │ ├── CheckKernelHook.rc2 │ │ └── ReadMe.txt │ │ ├── resource.h │ │ ├── stdafx.cpp │ │ ├── stdafx.h │ │ └── targetver.h ├── CheckKernelHookDrv │ ├── CheckKernelHook.sln │ ├── CheckKernelHook.suo │ └── CheckKernelHook │ │ ├── CheckKernelHook.sys │ │ ├── CheckKernelHook.vcxproj │ │ ├── CheckKernelHook.vcxproj.filters │ │ ├── CheckKernelHook.vcxproj.user │ │ ├── Common.c │ │ ├── Common.h │ │ ├── DriverEntry.c │ │ ├── DriverEntry.h │ │ ├── FileSystem.c │ │ ├── FileSystem.h │ │ ├── FixRelocation.c │ │ ├── FixRelocation.h │ │ ├── KernelHookCheck.c │ │ ├── KernelHookCheck.h │ │ ├── KernelReload.c │ │ ├── KernelReload.h │ │ ├── ReadMe.txt │ │ ├── Reload.c │ │ ├── Reload.h │ │ ├── clean.bat │ │ ├── ddkbuild.cmd │ │ ├── libdasm.c │ │ ├── libdasm.h │ │ ├── makefile │ │ ├── mybuild.bat │ │ ├── sources │ │ └── tables.h └── ReadMe.txt ├── GetKernel32Addressx64 ├── GetKernel32Addressx64.exe ├── GetKernel32Addressx64.sln ├── GetKernel32Addressx64.suo ├── GetKernel32Addressx64 │ ├── GetKernel32Addressx64.cpp │ ├── GetKernel32Addressx64.h │ ├── GetKernel32Addressx64.rc │ ├── GetKernel32Addressx64.vcxproj │ ├── GetKernel32Addressx64.vcxproj.filters │ ├── GetKernel32Addressx64.vcxproj.user │ ├── GetPeb.asm │ ├── ReadMe.txt │ ├── Resource.h │ ├── stdafx.cpp │ ├── stdafx.h │ └── targetver.h └── ReadMe.txt ├── HideProcess ├── HideProcess.c ├── HideProcess.h ├── HideProcess.sln ├── HideProcess.vcxproj ├── HideProcessx64.sys ├── HideProcessx86.sys ├── ReadMe.txt ├── clean.bat ├── common.h ├── ddkbuild.cmd ├── makefile ├── mybuild.bat ├── readme.txt ├── sources └── struct.h ├── Inject ├── CreateRemoteThread │ ├── CreateRemoteThread.sln │ ├── CreateRemoteThread.suo │ ├── CreateRemoteThread │ │ ├── CreateRemoteThread.cpp │ │ ├── CreateRemoteThread.h │ │ ├── CreateRemoteThread.rc │ │ ├── CreateRemoteThread.vcxproj │ │ ├── CreateRemoteThread.vcxproj.filters │ │ ├── CreateRemoteThread.vcxproj.user │ │ ├── Dllx64.dll │ │ ├── Dllx86.dll │ │ ├── ReadMe.txt │ │ ├── Resource.h │ │ ├── stdafx.cpp │ │ ├── stdafx.h │ │ └── targetver.h │ ├── CreateRemoteThreadx64.exe │ ├── CreateRemoteThreadx86.exe │ └── ReadMe.txt ├── SetThreadContext │ ├── InjectDllBySetThreadContextx64.exe │ ├── InjectDllBySetThreadContextx64.sln │ ├── InjectDllBySetThreadContextx64.suo │ ├── InjectDllBySetThreadContextx64 │ │ ├── Dllx64.dll │ │ ├── Dllx86.dll │ │ ├── InjectDllBySetThreadContextx64.cpp │ │ ├── InjectDllBySetThreadContextx64.vcxproj │ │ ├── InjectDllBySetThreadContextx64.vcxproj.filters │ │ ├── InjectDllBySetThreadContextx64.vcxproj.user │ │ ├── ReadMe.txt │ │ ├── stdafx.cpp │ │ ├── stdafx.h │ │ └── targetver.h │ ├── InjectDllBySetThreadContextx86.exe │ └── ReadMe.txt ├── SetWindowsHookEx │ ├── Debug │ │ ├── DllTestx64.dll │ │ ├── DllTestx86.dll │ │ ├── ReadMe.txt │ │ ├── SetWindowsHookExx64.exe │ │ └── SetWindowsHookExx86.exe │ ├── SetWindowsHookEx.sln │ ├── SetWindowsHookEx.suo │ └── SetWindowsHookEx │ │ ├── DllTestx64.dll │ │ ├── DllTestx86.dll │ │ ├── SetWindowsHookEx.cpp │ │ ├── SetWindowsHookEx.vcxproj │ │ ├── SetWindowsHookEx.vcxproj.filters │ │ ├── SetWindowsHookEx.vcxproj.user │ │ ├── stdafx.cpp │ │ ├── stdafx.h │ │ └── targetver.h └── UserApcInject │ ├── Debug │ ├── Dllx64.dll │ ├── Dllx86.dll │ ├── ReadMe.txt │ ├── UserAPCx64.exe │ └── UserAPCx86.exe │ ├── UserAPC.sln │ ├── UserAPC.suo │ └── UserAPC │ ├── Dllx64.dll │ ├── Dllx86.dll │ ├── ReadMe.txt │ ├── Resource.h │ ├── UserAPC.cpp │ ├── UserAPC.h │ ├── UserAPC.rc │ ├── UserAPC.vcxproj │ ├── UserAPC.vcxproj.filters │ ├── UserAPC.vcxproj.user │ ├── stdafx.cpp │ ├── stdafx.h │ └── targetver.h ├── KiFastCallEntry ├── Common.c ├── Common.h ├── HookKiFastCallEntry.c ├── HookKiFastCallEntry.h ├── Monitor.c ├── Monitor.h ├── Monitor.sln ├── Monitor.suo ├── Monitor.vcxproj ├── Monitor.vcxproj.filters ├── Monitor.vcxproj.user ├── ReadMe.txt ├── clean.bat ├── ddkbuild.cmd ├── makefile ├── mybuild.bat ├── objchk_wxp_x86 │ └── i386 │ │ └── Monitor.sys └── sources ├── LoadImageCallBack ├── Dll │ ├── Dll.sln │ ├── Dll.suo │ └── Dll │ │ ├── Dll.cpp │ │ ├── Dll.vcxproj │ │ ├── Dll.vcxproj.filters │ │ ├── Dll.vcxproj.user │ │ ├── ReadMe.txt │ │ ├── dllmain.cpp │ │ ├── stdafx.cpp │ │ ├── stdafx.h │ │ └── targetver.h ├── LoadImageCallBack │ ├── ModuleCallBack.c │ ├── ModuleCallBack.h │ ├── ModuleCallBack.sln │ ├── ModuleCallBack.suo │ ├── ModuleCallBack.vcxproj │ ├── ModuleCallBack.vcxproj.user │ ├── ModuleCallBackx86.sys │ ├── ReadMe.txt │ ├── clean.bat │ ├── common.h │ ├── ddkbuild.cmd │ ├── makefile │ ├── mybuild.bat │ ├── sources │ └── struct.h ├── ReadMe.txt └── inject │ ├── Inject.sln │ ├── Inject.suo │ └── Inject │ ├── Inject.cpp │ ├── Inject.h │ ├── Inject.rc │ ├── Inject.vcxproj │ ├── Inject.vcxproj.filters │ ├── Inject.vcxproj.user │ ├── ReadMe.txt │ ├── Resource.h │ ├── stdafx.cpp │ ├── stdafx.h │ └── targetver.h ├── ProcessCreateCallBack ├── ProcessManager.sln ├── ProcessManager.suo ├── ProcessManager │ ├── Common.cpp │ ├── Common.h │ ├── EnumProcess.cpp │ ├── EnumProcess.h │ ├── Monitor.cpp │ ├── Monitor.h │ ├── MonitorProcess.cpp │ ├── MonitorProcess.h │ ├── Process.cpp │ ├── Process.h │ ├── ProcessManager.aps │ ├── ProcessManager.cpp │ ├── ProcessManager.h │ ├── ProcessManager.rc │ ├── ProcessManager.vcxproj │ ├── ProcessManager.vcxproj.filters │ ├── ProcessManager.vcxproj.user │ ├── ProcessManagerDlg.cpp │ ├── ProcessManagerDlg.h │ ├── ProcessManagerx64.exe │ ├── res │ │ ├── ProcessManager.ico │ │ ├── ProcessManager.rc2 │ │ └── ReadMe.txt │ ├── resource.h │ ├── stdafx.cpp │ ├── stdafx.h │ └── targetver.h ├── ProcessManagerRing0 │ ├── CommonR0.c │ ├── CommonR0.h │ ├── EnumProcess.c │ ├── EnumProcess.h │ ├── HideProcess.c │ ├── HideProcess.h │ ├── MonitorWin7.c │ ├── MonitorWin7.h │ ├── ProcessManagerRing0.c │ ├── ProcessManagerRing0.h │ ├── ProcessManagerRing0.sln │ ├── ProcessManagerRing0.suo │ ├── ProcessManagerRing0.vcxproj │ ├── ProcessManagerRing0.vcxproj.filters │ ├── ProcessManagerRing0.vcxproj.user │ ├── ProcessManagerRing0x64.sys │ ├── ReadMe.txt │ ├── clean.bat │ ├── ddkbuild.cmd │ ├── makefile │ ├── mybuild.bat │ └── sources └── ReadMe.txt ├── ProtectFilex64 ├── FileProtectX64.c ├── FileProtectX64.h ├── FileProtectX64.sln ├── FileProtectX64.suo ├── FileProtectX64.sys ├── FileProtectX64.vcxproj ├── FileProtectX64.vcxproj.user ├── ReadMe.txt ├── clean.bat ├── common.h ├── ddkbuild.cmd ├── makefile ├── mybuild.bat ├── sources └── struct.h ├── ProtectFilex86 ├── FileProtectX86.c ├── FileProtectX86.h ├── FileProtectX86.sln ├── FileProtectX86.suo ├── FileProtectX86.sys ├── FileProtectX86.vcxproj ├── FileProtectX86.vcxproj.user ├── ReadMe.txt ├── clean.bat ├── common.h ├── ddkbuild.cmd ├── makefile ├── mybuild.bat ├── sources └── struct.h ├── ProtectProcessx64 ├── ProtectProcessx64.c ├── ProtectProcessx64.h ├── ProtectProcessx64.sln ├── ProtectProcessx64.suo ├── ProtectProcessx64.sys ├── ProtectProcessx64.vcxproj ├── ProtectProcessx64.vcxproj.user ├── ReadMe.txt ├── clean.bat ├── common.h ├── ddkbuild.cmd ├── makefile ├── mybuild.bat ├── sources └── struct.h ├── ReloadKernel-XP ├── ReadMe.txt ├── ReloadKernel.sln ├── ReloadKernel.suo └── ReloadKernel │ ├── FileSystem.c │ ├── FileSystem.h │ ├── FixRelocation.c │ ├── FixRelocation.h │ ├── KernelReload.c │ ├── KernelReload.h │ ├── ReadMe.txt │ ├── Reload.c │ ├── Reload.h │ ├── ReloadKernel.filters │ ├── ReloadKernel.sys │ ├── ReloadKernel.vcxproj │ ├── ReloadKernel.vcxproj.filters │ ├── ReloadKernel.vcxproj.user │ └── sources ├── SSDT-SSSDT-Manager ├── EnumSSSDTManager │ ├── EnumSSSDTManager.sln │ ├── EnumSSSDTManager.suo │ └── EnumSSSDTManager │ │ ├── EnumSSSDTManager.aps │ │ ├── EnumSSSDTManager.cpp │ │ ├── EnumSSSDTManager.h │ │ ├── EnumSSSDTManager.idc │ │ ├── EnumSSSDTManager.rc │ │ ├── EnumSSSDTManager.vcxproj │ │ ├── EnumSSSDTManager.vcxproj.filters │ │ ├── EnumSSSDTManager.vcxproj.user │ │ ├── EnumSSSDTManagerDlg.cpp │ │ ├── EnumSSSDTManagerDlg.h │ │ ├── EnumSSSDTManagerx64.exe │ │ ├── EnumSSSDTManagerx86.exe │ │ ├── OpenDevice.cpp │ │ ├── OpenDevice.h │ │ ├── SSDT.cpp │ │ ├── SSDT.h │ │ ├── SSDTFunc.h │ │ ├── SSSDT.cpp │ │ ├── SSSDT.h │ │ ├── SSSDTFunc.h │ │ ├── res │ │ ├── EnumSSSDTManager.ico │ │ ├── EnumSSSDTManager.rc2 │ │ └── ReadMe.txt │ │ ├── resource.h │ │ ├── stdafx.cpp │ │ ├── stdafx.h │ │ └── targetver.h ├── EnumSSSDTManagerRing0 │ ├── GetService.c │ ├── GetService.h │ ├── ReadMe.txt │ ├── SSDT.c │ ├── SSDT.h │ ├── SSSDT.c │ ├── SSSDT.h │ ├── SSSDTManager.c │ ├── SSSDTManager.h │ ├── SSSDTManager.sln │ ├── SSSDTManager.suo │ ├── SSSDTManager.vcxproj │ ├── SSSDTManager.vcxproj.filters │ ├── SSSDTManager.vcxproj.user │ ├── SSSDTManagerx64.sys │ ├── SSSDTManagerx86.sys │ ├── clean.bat │ ├── common.c │ ├── common.h │ ├── ddkbuild.cmd │ ├── makefile │ ├── mybuild.bat │ └── sources └── ReadMe.txt └── ZwQueryVirtualMemory ├── CommonR0.c ├── CommonR0.h ├── GetSSDTFuncAddress.c ├── GetSSDTFuncAddress.h ├── ReadMe.txt ├── ZwQueryVirtualMemory.c ├── ZwQueryVirtualMemory.h ├── ZwQueryVirtualMemory.sln ├── ZwQueryVirtualMemory.suo ├── ZwQueryVirtualMemory.sys ├── ZwQueryVirtualMemory.vcxproj ├── ZwQueryVirtualMemory.vcxproj.user ├── clean.bat ├── ddkbuild.cmd ├── makefile └── mybuild.bat /.gitattributes: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/.gitattributes -------------------------------------------------------------------------------- /.gitignore: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/.gitignore -------------------------------------------------------------------------------- /CheckKernelEATHook/CheckKernelHook/CheckKernelHook.exe: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/CheckKernelEATHook/CheckKernelHook/CheckKernelHook.exe -------------------------------------------------------------------------------- /CheckKernelEATHook/CheckKernelHook/CheckKernelHook.sln: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/CheckKernelEATHook/CheckKernelHook/CheckKernelHook.sln -------------------------------------------------------------------------------- /CheckKernelEATHook/CheckKernelHook/CheckKernelHook.suo: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/CheckKernelEATHook/CheckKernelHook/CheckKernelHook.suo -------------------------------------------------------------------------------- /CheckKernelEATHook/CheckKernelHook/CheckKernelHook/AddService.cpp: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/CheckKernelEATHook/CheckKernelHook/CheckKernelHook/AddService.cpp -------------------------------------------------------------------------------- /CheckKernelEATHook/CheckKernelHook/CheckKernelHook/AddService.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/CheckKernelEATHook/CheckKernelHook/CheckKernelHook/AddService.h -------------------------------------------------------------------------------- /CheckKernelEATHook/CheckKernelHook/CheckKernelHook/CheckKernelHook.aps: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/CheckKernelEATHook/CheckKernelHook/CheckKernelHook/CheckKernelHook.aps -------------------------------------------------------------------------------- /CheckKernelEATHook/CheckKernelHook/CheckKernelHook/CheckKernelHook.cpp: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/CheckKernelEATHook/CheckKernelHook/CheckKernelHook/CheckKernelHook.cpp -------------------------------------------------------------------------------- /CheckKernelEATHook/CheckKernelHook/CheckKernelHook/CheckKernelHook.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/CheckKernelEATHook/CheckKernelHook/CheckKernelHook/CheckKernelHook.h -------------------------------------------------------------------------------- /CheckKernelEATHook/CheckKernelHook/CheckKernelHook/CheckKernelHook.rc: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/CheckKernelEATHook/CheckKernelHook/CheckKernelHook/CheckKernelHook.rc -------------------------------------------------------------------------------- /CheckKernelEATHook/CheckKernelHook/CheckKernelHook/CheckKernelHook.vcxproj: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/CheckKernelEATHook/CheckKernelHook/CheckKernelHook/CheckKernelHook.vcxproj -------------------------------------------------------------------------------- /CheckKernelEATHook/CheckKernelHook/CheckKernelHook/CheckKernelHook.vcxproj.filters: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/CheckKernelEATHook/CheckKernelHook/CheckKernelHook/CheckKernelHook.vcxproj.filters -------------------------------------------------------------------------------- /CheckKernelEATHook/CheckKernelHook/CheckKernelHook/CheckKernelHook.vcxproj.user: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/CheckKernelEATHook/CheckKernelHook/CheckKernelHook/CheckKernelHook.vcxproj.user -------------------------------------------------------------------------------- /CheckKernelEATHook/CheckKernelHook/CheckKernelHook/CheckKernelHookDlg.cpp: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/CheckKernelEATHook/CheckKernelHook/CheckKernelHook/CheckKernelHookDlg.cpp -------------------------------------------------------------------------------- /CheckKernelEATHook/CheckKernelHook/CheckKernelHook/CheckKernelHookDlg.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/CheckKernelEATHook/CheckKernelHook/CheckKernelHook/CheckKernelHookDlg.h -------------------------------------------------------------------------------- /CheckKernelEATHook/CheckKernelHook/CheckKernelHook/res/CheckKernelHook.ico: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/CheckKernelEATHook/CheckKernelHook/CheckKernelHook/res/CheckKernelHook.ico -------------------------------------------------------------------------------- /CheckKernelEATHook/CheckKernelHook/CheckKernelHook/res/CheckKernelHook.rc2: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/CheckKernelEATHook/CheckKernelHook/CheckKernelHook/res/CheckKernelHook.rc2 -------------------------------------------------------------------------------- /CheckKernelEATHook/CheckKernelHook/CheckKernelHook/res/ReadMe.txt: -------------------------------------------------------------------------------- 1 | Check Kernel EAT Hook 2 | -------------------------------------------------------------------------------- /CheckKernelEATHook/CheckKernelHook/CheckKernelHook/resource.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/CheckKernelEATHook/CheckKernelHook/CheckKernelHook/resource.h -------------------------------------------------------------------------------- /CheckKernelEATHook/CheckKernelHook/CheckKernelHook/stdafx.cpp: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/CheckKernelEATHook/CheckKernelHook/CheckKernelHook/stdafx.cpp -------------------------------------------------------------------------------- /CheckKernelEATHook/CheckKernelHook/CheckKernelHook/stdafx.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/CheckKernelEATHook/CheckKernelHook/CheckKernelHook/stdafx.h -------------------------------------------------------------------------------- /CheckKernelEATHook/CheckKernelHook/CheckKernelHook/targetver.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/CheckKernelEATHook/CheckKernelHook/CheckKernelHook/targetver.h -------------------------------------------------------------------------------- /CheckKernelEATHook/CheckKernelHookDrv/CheckKernelHook.sln: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/CheckKernelEATHook/CheckKernelHookDrv/CheckKernelHook.sln -------------------------------------------------------------------------------- /CheckKernelEATHook/CheckKernelHookDrv/CheckKernelHook.suo: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/CheckKernelEATHook/CheckKernelHookDrv/CheckKernelHook.suo -------------------------------------------------------------------------------- /CheckKernelEATHook/CheckKernelHookDrv/CheckKernelHook/CheckKernelHook.sys: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/CheckKernelEATHook/CheckKernelHookDrv/CheckKernelHook/CheckKernelHook.sys -------------------------------------------------------------------------------- /CheckKernelEATHook/CheckKernelHookDrv/CheckKernelHook/CheckKernelHook.vcxproj: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/CheckKernelEATHook/CheckKernelHookDrv/CheckKernelHook/CheckKernelHook.vcxproj -------------------------------------------------------------------------------- /CheckKernelEATHook/CheckKernelHookDrv/CheckKernelHook/CheckKernelHook.vcxproj.filters: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/CheckKernelEATHook/CheckKernelHookDrv/CheckKernelHook/CheckKernelHook.vcxproj.filters -------------------------------------------------------------------------------- /CheckKernelEATHook/CheckKernelHookDrv/CheckKernelHook/CheckKernelHook.vcxproj.user: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/CheckKernelEATHook/CheckKernelHookDrv/CheckKernelHook/CheckKernelHook.vcxproj.user -------------------------------------------------------------------------------- /CheckKernelEATHook/CheckKernelHookDrv/CheckKernelHook/Common.c: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/CheckKernelEATHook/CheckKernelHookDrv/CheckKernelHook/Common.c -------------------------------------------------------------------------------- /CheckKernelEATHook/CheckKernelHookDrv/CheckKernelHook/Common.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/CheckKernelEATHook/CheckKernelHookDrv/CheckKernelHook/Common.h -------------------------------------------------------------------------------- /CheckKernelEATHook/CheckKernelHookDrv/CheckKernelHook/DriverEntry.c: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/CheckKernelEATHook/CheckKernelHookDrv/CheckKernelHook/DriverEntry.c -------------------------------------------------------------------------------- /CheckKernelEATHook/CheckKernelHookDrv/CheckKernelHook/DriverEntry.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/CheckKernelEATHook/CheckKernelHookDrv/CheckKernelHook/DriverEntry.h -------------------------------------------------------------------------------- /CheckKernelEATHook/CheckKernelHookDrv/CheckKernelHook/FileSystem.c: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/CheckKernelEATHook/CheckKernelHookDrv/CheckKernelHook/FileSystem.c -------------------------------------------------------------------------------- /CheckKernelEATHook/CheckKernelHookDrv/CheckKernelHook/FileSystem.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/CheckKernelEATHook/CheckKernelHookDrv/CheckKernelHook/FileSystem.h -------------------------------------------------------------------------------- /CheckKernelEATHook/CheckKernelHookDrv/CheckKernelHook/FixRelocation.c: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/CheckKernelEATHook/CheckKernelHookDrv/CheckKernelHook/FixRelocation.c -------------------------------------------------------------------------------- /CheckKernelEATHook/CheckKernelHookDrv/CheckKernelHook/FixRelocation.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/CheckKernelEATHook/CheckKernelHookDrv/CheckKernelHook/FixRelocation.h -------------------------------------------------------------------------------- /CheckKernelEATHook/CheckKernelHookDrv/CheckKernelHook/KernelHookCheck.c: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/CheckKernelEATHook/CheckKernelHookDrv/CheckKernelHook/KernelHookCheck.c -------------------------------------------------------------------------------- /CheckKernelEATHook/CheckKernelHookDrv/CheckKernelHook/KernelHookCheck.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/CheckKernelEATHook/CheckKernelHookDrv/CheckKernelHook/KernelHookCheck.h -------------------------------------------------------------------------------- /CheckKernelEATHook/CheckKernelHookDrv/CheckKernelHook/KernelReload.c: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/CheckKernelEATHook/CheckKernelHookDrv/CheckKernelHook/KernelReload.c -------------------------------------------------------------------------------- /CheckKernelEATHook/CheckKernelHookDrv/CheckKernelHook/KernelReload.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/CheckKernelEATHook/CheckKernelHookDrv/CheckKernelHook/KernelReload.h -------------------------------------------------------------------------------- /CheckKernelEATHook/CheckKernelHookDrv/CheckKernelHook/ReadMe.txt: -------------------------------------------------------------------------------- 1 | Check Kernel EAT Hook 2 | -------------------------------------------------------------------------------- /CheckKernelEATHook/CheckKernelHookDrv/CheckKernelHook/Reload.c: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/CheckKernelEATHook/CheckKernelHookDrv/CheckKernelHook/Reload.c -------------------------------------------------------------------------------- /CheckKernelEATHook/CheckKernelHookDrv/CheckKernelHook/Reload.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/CheckKernelEATHook/CheckKernelHookDrv/CheckKernelHook/Reload.h -------------------------------------------------------------------------------- /CheckKernelEATHook/CheckKernelHookDrv/CheckKernelHook/clean.bat: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/CheckKernelEATHook/CheckKernelHookDrv/CheckKernelHook/clean.bat -------------------------------------------------------------------------------- /CheckKernelEATHook/CheckKernelHookDrv/CheckKernelHook/ddkbuild.cmd: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/CheckKernelEATHook/CheckKernelHookDrv/CheckKernelHook/ddkbuild.cmd -------------------------------------------------------------------------------- /CheckKernelEATHook/CheckKernelHookDrv/CheckKernelHook/libdasm.c: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/CheckKernelEATHook/CheckKernelHookDrv/CheckKernelHook/libdasm.c -------------------------------------------------------------------------------- /CheckKernelEATHook/CheckKernelHookDrv/CheckKernelHook/libdasm.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/CheckKernelEATHook/CheckKernelHookDrv/CheckKernelHook/libdasm.h -------------------------------------------------------------------------------- /CheckKernelEATHook/CheckKernelHookDrv/CheckKernelHook/makefile: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/CheckKernelEATHook/CheckKernelHookDrv/CheckKernelHook/makefile -------------------------------------------------------------------------------- /CheckKernelEATHook/CheckKernelHookDrv/CheckKernelHook/mybuild.bat: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/CheckKernelEATHook/CheckKernelHookDrv/CheckKernelHook/mybuild.bat -------------------------------------------------------------------------------- /CheckKernelEATHook/CheckKernelHookDrv/CheckKernelHook/sources: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/CheckKernelEATHook/CheckKernelHookDrv/CheckKernelHook/sources -------------------------------------------------------------------------------- /CheckKernelEATHook/CheckKernelHookDrv/CheckKernelHook/tables.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/CheckKernelEATHook/CheckKernelHookDrv/CheckKernelHook/tables.h -------------------------------------------------------------------------------- /CheckKernelEATHook/ReadMe.txt: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/CheckKernelEATHook/ReadMe.txt -------------------------------------------------------------------------------- /GetKernel32Addressx64/GetKernel32Addressx64.exe: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/GetKernel32Addressx64/GetKernel32Addressx64.exe -------------------------------------------------------------------------------- /GetKernel32Addressx64/GetKernel32Addressx64.sln: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/GetKernel32Addressx64/GetKernel32Addressx64.sln -------------------------------------------------------------------------------- /GetKernel32Addressx64/GetKernel32Addressx64.suo: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/GetKernel32Addressx64/GetKernel32Addressx64.suo -------------------------------------------------------------------------------- /GetKernel32Addressx64/GetKernel32Addressx64/GetKernel32Addressx64.cpp: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/GetKernel32Addressx64/GetKernel32Addressx64/GetKernel32Addressx64.cpp -------------------------------------------------------------------------------- /GetKernel32Addressx64/GetKernel32Addressx64/GetKernel32Addressx64.h: -------------------------------------------------------------------------------- 1 | #pragma once 2 | 3 | #include "resource.h" 4 | -------------------------------------------------------------------------------- /GetKernel32Addressx64/GetKernel32Addressx64/GetKernel32Addressx64.rc: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/GetKernel32Addressx64/GetKernel32Addressx64/GetKernel32Addressx64.rc -------------------------------------------------------------------------------- /GetKernel32Addressx64/GetKernel32Addressx64/GetKernel32Addressx64.vcxproj: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/GetKernel32Addressx64/GetKernel32Addressx64/GetKernel32Addressx64.vcxproj -------------------------------------------------------------------------------- /GetKernel32Addressx64/GetKernel32Addressx64/GetKernel32Addressx64.vcxproj.filters: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/GetKernel32Addressx64/GetKernel32Addressx64/GetKernel32Addressx64.vcxproj.filters -------------------------------------------------------------------------------- /GetKernel32Addressx64/GetKernel32Addressx64/GetKernel32Addressx64.vcxproj.user: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/GetKernel32Addressx64/GetKernel32Addressx64/GetKernel32Addressx64.vcxproj.user -------------------------------------------------------------------------------- /GetKernel32Addressx64/GetKernel32Addressx64/GetPeb.asm: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/GetKernel32Addressx64/GetKernel32Addressx64/GetPeb.asm -------------------------------------------------------------------------------- /GetKernel32Addressx64/GetKernel32Addressx64/ReadMe.txt: -------------------------------------------------------------------------------- 1 | 2 | -------------------------------------------------------------------------------- /GetKernel32Addressx64/GetKernel32Addressx64/Resource.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/GetKernel32Addressx64/GetKernel32Addressx64/Resource.h -------------------------------------------------------------------------------- /GetKernel32Addressx64/GetKernel32Addressx64/stdafx.cpp: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/GetKernel32Addressx64/GetKernel32Addressx64/stdafx.cpp -------------------------------------------------------------------------------- /GetKernel32Addressx64/GetKernel32Addressx64/stdafx.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/GetKernel32Addressx64/GetKernel32Addressx64/stdafx.h -------------------------------------------------------------------------------- /GetKernel32Addressx64/GetKernel32Addressx64/targetver.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/GetKernel32Addressx64/GetKernel32Addressx64/targetver.h -------------------------------------------------------------------------------- /GetKernel32Addressx64/ReadMe.txt: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/GetKernel32Addressx64/ReadMe.txt -------------------------------------------------------------------------------- /HideProcess/HideProcess.c: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/HideProcess/HideProcess.c -------------------------------------------------------------------------------- /HideProcess/HideProcess.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/HideProcess/HideProcess.h -------------------------------------------------------------------------------- /HideProcess/HideProcess.sln: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/HideProcess/HideProcess.sln -------------------------------------------------------------------------------- /HideProcess/HideProcess.vcxproj: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/HideProcess/HideProcess.vcxproj -------------------------------------------------------------------------------- /HideProcess/HideProcessx64.sys: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/HideProcess/HideProcessx64.sys -------------------------------------------------------------------------------- /HideProcess/HideProcessx86.sys: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/HideProcess/HideProcessx86.sys -------------------------------------------------------------------------------- /HideProcess/ReadMe.txt: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/HideProcess/ReadMe.txt -------------------------------------------------------------------------------- /HideProcess/clean.bat: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/HideProcess/clean.bat -------------------------------------------------------------------------------- /HideProcess/common.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/HideProcess/common.h -------------------------------------------------------------------------------- /HideProcess/ddkbuild.cmd: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/HideProcess/ddkbuild.cmd -------------------------------------------------------------------------------- /HideProcess/makefile: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/HideProcess/makefile -------------------------------------------------------------------------------- /HideProcess/mybuild.bat: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/HideProcess/mybuild.bat -------------------------------------------------------------------------------- /HideProcess/readme.txt: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/HideProcess/readme.txt -------------------------------------------------------------------------------- /HideProcess/sources: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/HideProcess/sources -------------------------------------------------------------------------------- /HideProcess/struct.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/HideProcess/struct.h -------------------------------------------------------------------------------- /Inject/CreateRemoteThread/CreateRemoteThread.sln: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/Inject/CreateRemoteThread/CreateRemoteThread.sln -------------------------------------------------------------------------------- /Inject/CreateRemoteThread/CreateRemoteThread.suo: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/Inject/CreateRemoteThread/CreateRemoteThread.suo -------------------------------------------------------------------------------- /Inject/CreateRemoteThread/CreateRemoteThread/CreateRemoteThread.cpp: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/Inject/CreateRemoteThread/CreateRemoteThread/CreateRemoteThread.cpp -------------------------------------------------------------------------------- /Inject/CreateRemoteThread/CreateRemoteThread/CreateRemoteThread.h: -------------------------------------------------------------------------------- 1 | #pragma once 2 | 3 | #include "resource.h" 4 | -------------------------------------------------------------------------------- /Inject/CreateRemoteThread/CreateRemoteThread/CreateRemoteThread.rc: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/Inject/CreateRemoteThread/CreateRemoteThread/CreateRemoteThread.rc -------------------------------------------------------------------------------- /Inject/CreateRemoteThread/CreateRemoteThread/CreateRemoteThread.vcxproj: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/Inject/CreateRemoteThread/CreateRemoteThread/CreateRemoteThread.vcxproj -------------------------------------------------------------------------------- /Inject/CreateRemoteThread/CreateRemoteThread/CreateRemoteThread.vcxproj.filters: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/Inject/CreateRemoteThread/CreateRemoteThread/CreateRemoteThread.vcxproj.filters -------------------------------------------------------------------------------- /Inject/CreateRemoteThread/CreateRemoteThread/CreateRemoteThread.vcxproj.user: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/Inject/CreateRemoteThread/CreateRemoteThread/CreateRemoteThread.vcxproj.user -------------------------------------------------------------------------------- /Inject/CreateRemoteThread/CreateRemoteThread/Dllx64.dll: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/Inject/CreateRemoteThread/CreateRemoteThread/Dllx64.dll -------------------------------------------------------------------------------- /Inject/CreateRemoteThread/CreateRemoteThread/Dllx86.dll: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/Inject/CreateRemoteThread/CreateRemoteThread/Dllx86.dll -------------------------------------------------------------------------------- /Inject/CreateRemoteThread/CreateRemoteThread/ReadMe.txt: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/Inject/CreateRemoteThread/CreateRemoteThread/ReadMe.txt -------------------------------------------------------------------------------- /Inject/CreateRemoteThread/CreateRemoteThread/Resource.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/Inject/CreateRemoteThread/CreateRemoteThread/Resource.h -------------------------------------------------------------------------------- /Inject/CreateRemoteThread/CreateRemoteThread/stdafx.cpp: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/Inject/CreateRemoteThread/CreateRemoteThread/stdafx.cpp -------------------------------------------------------------------------------- /Inject/CreateRemoteThread/CreateRemoteThread/stdafx.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/Inject/CreateRemoteThread/CreateRemoteThread/stdafx.h -------------------------------------------------------------------------------- /Inject/CreateRemoteThread/CreateRemoteThread/targetver.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/Inject/CreateRemoteThread/CreateRemoteThread/targetver.h -------------------------------------------------------------------------------- /Inject/CreateRemoteThread/CreateRemoteThreadx64.exe: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/Inject/CreateRemoteThread/CreateRemoteThreadx64.exe -------------------------------------------------------------------------------- /Inject/CreateRemoteThread/CreateRemoteThreadx86.exe: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/Inject/CreateRemoteThread/CreateRemoteThreadx86.exe -------------------------------------------------------------------------------- /Inject/CreateRemoteThread/ReadMe.txt: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/Inject/CreateRemoteThread/ReadMe.txt -------------------------------------------------------------------------------- /Inject/SetThreadContext/InjectDllBySetThreadContextx64.exe: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/Inject/SetThreadContext/InjectDllBySetThreadContextx64.exe -------------------------------------------------------------------------------- /Inject/SetThreadContext/InjectDllBySetThreadContextx64.sln: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/Inject/SetThreadContext/InjectDllBySetThreadContextx64.sln -------------------------------------------------------------------------------- /Inject/SetThreadContext/InjectDllBySetThreadContextx64.suo: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/Inject/SetThreadContext/InjectDllBySetThreadContextx64.suo -------------------------------------------------------------------------------- /Inject/SetThreadContext/InjectDllBySetThreadContextx64/Dllx64.dll: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/Inject/SetThreadContext/InjectDllBySetThreadContextx64/Dllx64.dll -------------------------------------------------------------------------------- /Inject/SetThreadContext/InjectDllBySetThreadContextx64/Dllx86.dll: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/Inject/SetThreadContext/InjectDllBySetThreadContextx64/Dllx86.dll -------------------------------------------------------------------------------- /Inject/SetThreadContext/InjectDllBySetThreadContextx64/InjectDllBySetThreadContextx64.cpp: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/Inject/SetThreadContext/InjectDllBySetThreadContextx64/InjectDllBySetThreadContextx64.cpp -------------------------------------------------------------------------------- /Inject/SetThreadContext/InjectDllBySetThreadContextx64/InjectDllBySetThreadContextx64.vcxproj: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/Inject/SetThreadContext/InjectDllBySetThreadContextx64/InjectDllBySetThreadContextx64.vcxproj -------------------------------------------------------------------------------- /Inject/SetThreadContext/InjectDllBySetThreadContextx64/InjectDllBySetThreadContextx64.vcxproj.filters: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/Inject/SetThreadContext/InjectDllBySetThreadContextx64/InjectDllBySetThreadContextx64.vcxproj.filters -------------------------------------------------------------------------------- /Inject/SetThreadContext/InjectDllBySetThreadContextx64/InjectDllBySetThreadContextx64.vcxproj.user: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/Inject/SetThreadContext/InjectDllBySetThreadContextx64/InjectDllBySetThreadContextx64.vcxproj.user -------------------------------------------------------------------------------- /Inject/SetThreadContext/InjectDllBySetThreadContextx64/ReadMe.txt: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/Inject/SetThreadContext/InjectDllBySetThreadContextx64/ReadMe.txt -------------------------------------------------------------------------------- /Inject/SetThreadContext/InjectDllBySetThreadContextx64/stdafx.cpp: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/Inject/SetThreadContext/InjectDllBySetThreadContextx64/stdafx.cpp -------------------------------------------------------------------------------- /Inject/SetThreadContext/InjectDllBySetThreadContextx64/stdafx.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/Inject/SetThreadContext/InjectDllBySetThreadContextx64/stdafx.h -------------------------------------------------------------------------------- /Inject/SetThreadContext/InjectDllBySetThreadContextx64/targetver.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/Inject/SetThreadContext/InjectDllBySetThreadContextx64/targetver.h -------------------------------------------------------------------------------- /Inject/SetThreadContext/InjectDllBySetThreadContextx86.exe: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/Inject/SetThreadContext/InjectDllBySetThreadContextx86.exe -------------------------------------------------------------------------------- /Inject/SetThreadContext/ReadMe.txt: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/Inject/SetThreadContext/ReadMe.txt -------------------------------------------------------------------------------- /Inject/SetWindowsHookEx/Debug/DllTestx64.dll: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/Inject/SetWindowsHookEx/Debug/DllTestx64.dll -------------------------------------------------------------------------------- /Inject/SetWindowsHookEx/Debug/DllTestx86.dll: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/Inject/SetWindowsHookEx/Debug/DllTestx86.dll -------------------------------------------------------------------------------- /Inject/SetWindowsHookEx/Debug/ReadMe.txt: -------------------------------------------------------------------------------- 1 | Inject DLL by SetWindowsHookEx 2 | -------------------------------------------------------------------------------- /Inject/SetWindowsHookEx/Debug/SetWindowsHookExx64.exe: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/Inject/SetWindowsHookEx/Debug/SetWindowsHookExx64.exe -------------------------------------------------------------------------------- /Inject/SetWindowsHookEx/Debug/SetWindowsHookExx86.exe: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/Inject/SetWindowsHookEx/Debug/SetWindowsHookExx86.exe -------------------------------------------------------------------------------- /Inject/SetWindowsHookEx/SetWindowsHookEx.sln: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/Inject/SetWindowsHookEx/SetWindowsHookEx.sln -------------------------------------------------------------------------------- /Inject/SetWindowsHookEx/SetWindowsHookEx.suo: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/Inject/SetWindowsHookEx/SetWindowsHookEx.suo -------------------------------------------------------------------------------- /Inject/SetWindowsHookEx/SetWindowsHookEx/DllTestx64.dll: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/Inject/SetWindowsHookEx/SetWindowsHookEx/DllTestx64.dll -------------------------------------------------------------------------------- /Inject/SetWindowsHookEx/SetWindowsHookEx/DllTestx86.dll: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/Inject/SetWindowsHookEx/SetWindowsHookEx/DllTestx86.dll -------------------------------------------------------------------------------- /Inject/SetWindowsHookEx/SetWindowsHookEx/SetWindowsHookEx.cpp: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/Inject/SetWindowsHookEx/SetWindowsHookEx/SetWindowsHookEx.cpp -------------------------------------------------------------------------------- /Inject/SetWindowsHookEx/SetWindowsHookEx/SetWindowsHookEx.vcxproj: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/Inject/SetWindowsHookEx/SetWindowsHookEx/SetWindowsHookEx.vcxproj -------------------------------------------------------------------------------- /Inject/SetWindowsHookEx/SetWindowsHookEx/SetWindowsHookEx.vcxproj.filters: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/Inject/SetWindowsHookEx/SetWindowsHookEx/SetWindowsHookEx.vcxproj.filters -------------------------------------------------------------------------------- /Inject/SetWindowsHookEx/SetWindowsHookEx/SetWindowsHookEx.vcxproj.user: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/Inject/SetWindowsHookEx/SetWindowsHookEx/SetWindowsHookEx.vcxproj.user -------------------------------------------------------------------------------- /Inject/SetWindowsHookEx/SetWindowsHookEx/stdafx.cpp: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/Inject/SetWindowsHookEx/SetWindowsHookEx/stdafx.cpp -------------------------------------------------------------------------------- /Inject/SetWindowsHookEx/SetWindowsHookEx/stdafx.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/Inject/SetWindowsHookEx/SetWindowsHookEx/stdafx.h -------------------------------------------------------------------------------- /Inject/SetWindowsHookEx/SetWindowsHookEx/targetver.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/Inject/SetWindowsHookEx/SetWindowsHookEx/targetver.h -------------------------------------------------------------------------------- /Inject/UserApcInject/Debug/Dllx64.dll: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/Inject/UserApcInject/Debug/Dllx64.dll -------------------------------------------------------------------------------- /Inject/UserApcInject/Debug/Dllx86.dll: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/Inject/UserApcInject/Debug/Dllx86.dll -------------------------------------------------------------------------------- /Inject/UserApcInject/Debug/ReadMe.txt: -------------------------------------------------------------------------------- 1 | Inject DLL By QueueUserAPC 2 | -------------------------------------------------------------------------------- /Inject/UserApcInject/Debug/UserAPCx64.exe: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/Inject/UserApcInject/Debug/UserAPCx64.exe -------------------------------------------------------------------------------- /Inject/UserApcInject/Debug/UserAPCx86.exe: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/Inject/UserApcInject/Debug/UserAPCx86.exe -------------------------------------------------------------------------------- /Inject/UserApcInject/UserAPC.sln: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/Inject/UserApcInject/UserAPC.sln -------------------------------------------------------------------------------- /Inject/UserApcInject/UserAPC.suo: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/Inject/UserApcInject/UserAPC.suo -------------------------------------------------------------------------------- /Inject/UserApcInject/UserAPC/Dllx64.dll: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/Inject/UserApcInject/UserAPC/Dllx64.dll -------------------------------------------------------------------------------- /Inject/UserApcInject/UserAPC/Dllx86.dll: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/Inject/UserApcInject/UserAPC/Dllx86.dll -------------------------------------------------------------------------------- /Inject/UserApcInject/UserAPC/ReadMe.txt: -------------------------------------------------------------------------------- 1 | 2 | -------------------------------------------------------------------------------- /Inject/UserApcInject/UserAPC/Resource.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/Inject/UserApcInject/UserAPC/Resource.h -------------------------------------------------------------------------------- /Inject/UserApcInject/UserAPC/UserAPC.cpp: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/Inject/UserApcInject/UserAPC/UserAPC.cpp -------------------------------------------------------------------------------- /Inject/UserApcInject/UserAPC/UserAPC.h: -------------------------------------------------------------------------------- 1 | #pragma once 2 | 3 | #include "resource.h" 4 | -------------------------------------------------------------------------------- /Inject/UserApcInject/UserAPC/UserAPC.rc: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/Inject/UserApcInject/UserAPC/UserAPC.rc -------------------------------------------------------------------------------- /Inject/UserApcInject/UserAPC/UserAPC.vcxproj: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/Inject/UserApcInject/UserAPC/UserAPC.vcxproj -------------------------------------------------------------------------------- /Inject/UserApcInject/UserAPC/UserAPC.vcxproj.filters: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/Inject/UserApcInject/UserAPC/UserAPC.vcxproj.filters -------------------------------------------------------------------------------- /Inject/UserApcInject/UserAPC/UserAPC.vcxproj.user: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/Inject/UserApcInject/UserAPC/UserAPC.vcxproj.user -------------------------------------------------------------------------------- /Inject/UserApcInject/UserAPC/stdafx.cpp: -------------------------------------------------------------------------------- 1 | 2 | #include "stdafx.h" 3 | -------------------------------------------------------------------------------- /Inject/UserApcInject/UserAPC/stdafx.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/Inject/UserApcInject/UserAPC/stdafx.h -------------------------------------------------------------------------------- /Inject/UserApcInject/UserAPC/targetver.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/Inject/UserApcInject/UserAPC/targetver.h -------------------------------------------------------------------------------- /KiFastCallEntry/Common.c: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/KiFastCallEntry/Common.c -------------------------------------------------------------------------------- /KiFastCallEntry/Common.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/KiFastCallEntry/Common.h -------------------------------------------------------------------------------- /KiFastCallEntry/HookKiFastCallEntry.c: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/KiFastCallEntry/HookKiFastCallEntry.c -------------------------------------------------------------------------------- /KiFastCallEntry/HookKiFastCallEntry.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/KiFastCallEntry/HookKiFastCallEntry.h -------------------------------------------------------------------------------- /KiFastCallEntry/Monitor.c: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/KiFastCallEntry/Monitor.c -------------------------------------------------------------------------------- /KiFastCallEntry/Monitor.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/KiFastCallEntry/Monitor.h -------------------------------------------------------------------------------- /KiFastCallEntry/Monitor.sln: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/KiFastCallEntry/Monitor.sln -------------------------------------------------------------------------------- /KiFastCallEntry/Monitor.suo: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/KiFastCallEntry/Monitor.suo -------------------------------------------------------------------------------- /KiFastCallEntry/Monitor.vcxproj: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/KiFastCallEntry/Monitor.vcxproj -------------------------------------------------------------------------------- /KiFastCallEntry/Monitor.vcxproj.filters: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/KiFastCallEntry/Monitor.vcxproj.filters -------------------------------------------------------------------------------- /KiFastCallEntry/Monitor.vcxproj.user: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/KiFastCallEntry/Monitor.vcxproj.user -------------------------------------------------------------------------------- /KiFastCallEntry/ReadMe.txt: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/KiFastCallEntry/ReadMe.txt -------------------------------------------------------------------------------- /KiFastCallEntry/clean.bat: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/KiFastCallEntry/clean.bat -------------------------------------------------------------------------------- /KiFastCallEntry/ddkbuild.cmd: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/KiFastCallEntry/ddkbuild.cmd -------------------------------------------------------------------------------- /KiFastCallEntry/makefile: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/KiFastCallEntry/makefile -------------------------------------------------------------------------------- /KiFastCallEntry/mybuild.bat: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/KiFastCallEntry/mybuild.bat -------------------------------------------------------------------------------- /KiFastCallEntry/objchk_wxp_x86/i386/Monitor.sys: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/KiFastCallEntry/objchk_wxp_x86/i386/Monitor.sys -------------------------------------------------------------------------------- /KiFastCallEntry/sources: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/KiFastCallEntry/sources -------------------------------------------------------------------------------- /LoadImageCallBack/Dll/Dll.sln: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/LoadImageCallBack/Dll/Dll.sln -------------------------------------------------------------------------------- /LoadImageCallBack/Dll/Dll.suo: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/LoadImageCallBack/Dll/Dll.suo -------------------------------------------------------------------------------- /LoadImageCallBack/Dll/Dll/Dll.cpp: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/LoadImageCallBack/Dll/Dll/Dll.cpp -------------------------------------------------------------------------------- /LoadImageCallBack/Dll/Dll/Dll.vcxproj: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/LoadImageCallBack/Dll/Dll/Dll.vcxproj -------------------------------------------------------------------------------- /LoadImageCallBack/Dll/Dll/Dll.vcxproj.filters: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/LoadImageCallBack/Dll/Dll/Dll.vcxproj.filters -------------------------------------------------------------------------------- /LoadImageCallBack/Dll/Dll/Dll.vcxproj.user: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/LoadImageCallBack/Dll/Dll/Dll.vcxproj.user -------------------------------------------------------------------------------- /LoadImageCallBack/Dll/Dll/ReadMe.txt: -------------------------------------------------------------------------------- 1 | Dll File to popup a messagebox when loaded 2 | -------------------------------------------------------------------------------- /LoadImageCallBack/Dll/Dll/dllmain.cpp: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/LoadImageCallBack/Dll/Dll/dllmain.cpp -------------------------------------------------------------------------------- /LoadImageCallBack/Dll/Dll/stdafx.cpp: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/LoadImageCallBack/Dll/Dll/stdafx.cpp -------------------------------------------------------------------------------- /LoadImageCallBack/Dll/Dll/stdafx.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/LoadImageCallBack/Dll/Dll/stdafx.h -------------------------------------------------------------------------------- /LoadImageCallBack/Dll/Dll/targetver.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/LoadImageCallBack/Dll/Dll/targetver.h -------------------------------------------------------------------------------- /LoadImageCallBack/LoadImageCallBack/ModuleCallBack.c: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/LoadImageCallBack/LoadImageCallBack/ModuleCallBack.c -------------------------------------------------------------------------------- /LoadImageCallBack/LoadImageCallBack/ModuleCallBack.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/LoadImageCallBack/LoadImageCallBack/ModuleCallBack.h -------------------------------------------------------------------------------- /LoadImageCallBack/LoadImageCallBack/ModuleCallBack.sln: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/LoadImageCallBack/LoadImageCallBack/ModuleCallBack.sln -------------------------------------------------------------------------------- /LoadImageCallBack/LoadImageCallBack/ModuleCallBack.suo: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/LoadImageCallBack/LoadImageCallBack/ModuleCallBack.suo -------------------------------------------------------------------------------- /LoadImageCallBack/LoadImageCallBack/ModuleCallBack.vcxproj: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/LoadImageCallBack/LoadImageCallBack/ModuleCallBack.vcxproj -------------------------------------------------------------------------------- /LoadImageCallBack/LoadImageCallBack/ModuleCallBack.vcxproj.user: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/LoadImageCallBack/LoadImageCallBack/ModuleCallBack.vcxproj.user -------------------------------------------------------------------------------- /LoadImageCallBack/LoadImageCallBack/ModuleCallBackx86.sys: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/LoadImageCallBack/LoadImageCallBack/ModuleCallBackx86.sys -------------------------------------------------------------------------------- /LoadImageCallBack/LoadImageCallBack/ReadMe.txt: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/LoadImageCallBack/LoadImageCallBack/ReadMe.txt -------------------------------------------------------------------------------- /LoadImageCallBack/LoadImageCallBack/clean.bat: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/LoadImageCallBack/LoadImageCallBack/clean.bat -------------------------------------------------------------------------------- /LoadImageCallBack/LoadImageCallBack/common.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/LoadImageCallBack/LoadImageCallBack/common.h -------------------------------------------------------------------------------- /LoadImageCallBack/LoadImageCallBack/ddkbuild.cmd: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/LoadImageCallBack/LoadImageCallBack/ddkbuild.cmd -------------------------------------------------------------------------------- /LoadImageCallBack/LoadImageCallBack/makefile: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/LoadImageCallBack/LoadImageCallBack/makefile -------------------------------------------------------------------------------- /LoadImageCallBack/LoadImageCallBack/mybuild.bat: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/LoadImageCallBack/LoadImageCallBack/mybuild.bat -------------------------------------------------------------------------------- /LoadImageCallBack/LoadImageCallBack/sources: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/LoadImageCallBack/LoadImageCallBack/sources -------------------------------------------------------------------------------- /LoadImageCallBack/LoadImageCallBack/struct.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/LoadImageCallBack/LoadImageCallBack/struct.h -------------------------------------------------------------------------------- /LoadImageCallBack/ReadMe.txt: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/LoadImageCallBack/ReadMe.txt -------------------------------------------------------------------------------- /LoadImageCallBack/inject/Inject.sln: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/LoadImageCallBack/inject/Inject.sln -------------------------------------------------------------------------------- /LoadImageCallBack/inject/Inject.suo: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/LoadImageCallBack/inject/Inject.suo -------------------------------------------------------------------------------- /LoadImageCallBack/inject/Inject/Inject.cpp: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/LoadImageCallBack/inject/Inject/Inject.cpp -------------------------------------------------------------------------------- /LoadImageCallBack/inject/Inject/Inject.h: -------------------------------------------------------------------------------- 1 | #pragma once 2 | 3 | #include "resource.h" 4 | -------------------------------------------------------------------------------- /LoadImageCallBack/inject/Inject/Inject.rc: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/LoadImageCallBack/inject/Inject/Inject.rc -------------------------------------------------------------------------------- /LoadImageCallBack/inject/Inject/Inject.vcxproj: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/LoadImageCallBack/inject/Inject/Inject.vcxproj -------------------------------------------------------------------------------- /LoadImageCallBack/inject/Inject/Inject.vcxproj.filters: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/LoadImageCallBack/inject/Inject/Inject.vcxproj.filters -------------------------------------------------------------------------------- /LoadImageCallBack/inject/Inject/Inject.vcxproj.user: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/LoadImageCallBack/inject/Inject/Inject.vcxproj.user -------------------------------------------------------------------------------- /LoadImageCallBack/inject/Inject/ReadMe.txt: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/LoadImageCallBack/inject/Inject/ReadMe.txt -------------------------------------------------------------------------------- /LoadImageCallBack/inject/Inject/Resource.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/LoadImageCallBack/inject/Inject/Resource.h -------------------------------------------------------------------------------- /LoadImageCallBack/inject/Inject/stdafx.cpp: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/LoadImageCallBack/inject/Inject/stdafx.cpp -------------------------------------------------------------------------------- /LoadImageCallBack/inject/Inject/stdafx.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/LoadImageCallBack/inject/Inject/stdafx.h -------------------------------------------------------------------------------- /LoadImageCallBack/inject/Inject/targetver.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/LoadImageCallBack/inject/Inject/targetver.h -------------------------------------------------------------------------------- /ProcessCreateCallBack/ProcessManager.sln: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/ProcessCreateCallBack/ProcessManager.sln -------------------------------------------------------------------------------- /ProcessCreateCallBack/ProcessManager.suo: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/ProcessCreateCallBack/ProcessManager.suo -------------------------------------------------------------------------------- /ProcessCreateCallBack/ProcessManager/Common.cpp: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/ProcessCreateCallBack/ProcessManager/Common.cpp -------------------------------------------------------------------------------- /ProcessCreateCallBack/ProcessManager/Common.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/ProcessCreateCallBack/ProcessManager/Common.h -------------------------------------------------------------------------------- /ProcessCreateCallBack/ProcessManager/EnumProcess.cpp: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/ProcessCreateCallBack/ProcessManager/EnumProcess.cpp -------------------------------------------------------------------------------- /ProcessCreateCallBack/ProcessManager/EnumProcess.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/ProcessCreateCallBack/ProcessManager/EnumProcess.h -------------------------------------------------------------------------------- /ProcessCreateCallBack/ProcessManager/Monitor.cpp: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/ProcessCreateCallBack/ProcessManager/Monitor.cpp -------------------------------------------------------------------------------- /ProcessCreateCallBack/ProcessManager/Monitor.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/ProcessCreateCallBack/ProcessManager/Monitor.h -------------------------------------------------------------------------------- /ProcessCreateCallBack/ProcessManager/MonitorProcess.cpp: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/ProcessCreateCallBack/ProcessManager/MonitorProcess.cpp -------------------------------------------------------------------------------- /ProcessCreateCallBack/ProcessManager/MonitorProcess.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/ProcessCreateCallBack/ProcessManager/MonitorProcess.h -------------------------------------------------------------------------------- /ProcessCreateCallBack/ProcessManager/Process.cpp: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/ProcessCreateCallBack/ProcessManager/Process.cpp -------------------------------------------------------------------------------- /ProcessCreateCallBack/ProcessManager/Process.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/ProcessCreateCallBack/ProcessManager/Process.h -------------------------------------------------------------------------------- /ProcessCreateCallBack/ProcessManager/ProcessManager.aps: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/ProcessCreateCallBack/ProcessManager/ProcessManager.aps -------------------------------------------------------------------------------- /ProcessCreateCallBack/ProcessManager/ProcessManager.cpp: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/ProcessCreateCallBack/ProcessManager/ProcessManager.cpp -------------------------------------------------------------------------------- /ProcessCreateCallBack/ProcessManager/ProcessManager.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/ProcessCreateCallBack/ProcessManager/ProcessManager.h -------------------------------------------------------------------------------- /ProcessCreateCallBack/ProcessManager/ProcessManager.rc: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/ProcessCreateCallBack/ProcessManager/ProcessManager.rc -------------------------------------------------------------------------------- /ProcessCreateCallBack/ProcessManager/ProcessManager.vcxproj: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/ProcessCreateCallBack/ProcessManager/ProcessManager.vcxproj -------------------------------------------------------------------------------- /ProcessCreateCallBack/ProcessManager/ProcessManager.vcxproj.filters: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/ProcessCreateCallBack/ProcessManager/ProcessManager.vcxproj.filters -------------------------------------------------------------------------------- /ProcessCreateCallBack/ProcessManager/ProcessManager.vcxproj.user: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/ProcessCreateCallBack/ProcessManager/ProcessManager.vcxproj.user -------------------------------------------------------------------------------- /ProcessCreateCallBack/ProcessManager/ProcessManagerDlg.cpp: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/ProcessCreateCallBack/ProcessManager/ProcessManagerDlg.cpp -------------------------------------------------------------------------------- /ProcessCreateCallBack/ProcessManager/ProcessManagerDlg.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/ProcessCreateCallBack/ProcessManager/ProcessManagerDlg.h -------------------------------------------------------------------------------- /ProcessCreateCallBack/ProcessManager/ProcessManagerx64.exe: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/ProcessCreateCallBack/ProcessManager/ProcessManagerx64.exe -------------------------------------------------------------------------------- /ProcessCreateCallBack/ProcessManager/res/ProcessManager.ico: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/ProcessCreateCallBack/ProcessManager/res/ProcessManager.ico -------------------------------------------------------------------------------- /ProcessCreateCallBack/ProcessManager/res/ProcessManager.rc2: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/ProcessCreateCallBack/ProcessManager/res/ProcessManager.rc2 -------------------------------------------------------------------------------- /ProcessCreateCallBack/ProcessManager/res/ReadMe.txt: -------------------------------------------------------------------------------- 1 | ProcessManager in R3 2 | -------------------------------------------------------------------------------- /ProcessCreateCallBack/ProcessManager/resource.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/ProcessCreateCallBack/ProcessManager/resource.h -------------------------------------------------------------------------------- /ProcessCreateCallBack/ProcessManager/stdafx.cpp: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/ProcessCreateCallBack/ProcessManager/stdafx.cpp -------------------------------------------------------------------------------- /ProcessCreateCallBack/ProcessManager/stdafx.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/ProcessCreateCallBack/ProcessManager/stdafx.h -------------------------------------------------------------------------------- /ProcessCreateCallBack/ProcessManager/targetver.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/ProcessCreateCallBack/ProcessManager/targetver.h -------------------------------------------------------------------------------- /ProcessCreateCallBack/ProcessManagerRing0/CommonR0.c: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/ProcessCreateCallBack/ProcessManagerRing0/CommonR0.c -------------------------------------------------------------------------------- /ProcessCreateCallBack/ProcessManagerRing0/CommonR0.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/ProcessCreateCallBack/ProcessManagerRing0/CommonR0.h -------------------------------------------------------------------------------- /ProcessCreateCallBack/ProcessManagerRing0/EnumProcess.c: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/ProcessCreateCallBack/ProcessManagerRing0/EnumProcess.c -------------------------------------------------------------------------------- /ProcessCreateCallBack/ProcessManagerRing0/EnumProcess.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/ProcessCreateCallBack/ProcessManagerRing0/EnumProcess.h -------------------------------------------------------------------------------- /ProcessCreateCallBack/ProcessManagerRing0/HideProcess.c: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/ProcessCreateCallBack/ProcessManagerRing0/HideProcess.c -------------------------------------------------------------------------------- /ProcessCreateCallBack/ProcessManagerRing0/HideProcess.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/ProcessCreateCallBack/ProcessManagerRing0/HideProcess.h -------------------------------------------------------------------------------- /ProcessCreateCallBack/ProcessManagerRing0/MonitorWin7.c: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/ProcessCreateCallBack/ProcessManagerRing0/MonitorWin7.c -------------------------------------------------------------------------------- /ProcessCreateCallBack/ProcessManagerRing0/MonitorWin7.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/ProcessCreateCallBack/ProcessManagerRing0/MonitorWin7.h -------------------------------------------------------------------------------- /ProcessCreateCallBack/ProcessManagerRing0/ProcessManagerRing0.c: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/ProcessCreateCallBack/ProcessManagerRing0/ProcessManagerRing0.c -------------------------------------------------------------------------------- /ProcessCreateCallBack/ProcessManagerRing0/ProcessManagerRing0.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/ProcessCreateCallBack/ProcessManagerRing0/ProcessManagerRing0.h -------------------------------------------------------------------------------- /ProcessCreateCallBack/ProcessManagerRing0/ProcessManagerRing0.sln: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/ProcessCreateCallBack/ProcessManagerRing0/ProcessManagerRing0.sln -------------------------------------------------------------------------------- /ProcessCreateCallBack/ProcessManagerRing0/ProcessManagerRing0.suo: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/ProcessCreateCallBack/ProcessManagerRing0/ProcessManagerRing0.suo -------------------------------------------------------------------------------- /ProcessCreateCallBack/ProcessManagerRing0/ProcessManagerRing0.vcxproj: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/ProcessCreateCallBack/ProcessManagerRing0/ProcessManagerRing0.vcxproj -------------------------------------------------------------------------------- /ProcessCreateCallBack/ProcessManagerRing0/ProcessManagerRing0.vcxproj.filters: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/ProcessCreateCallBack/ProcessManagerRing0/ProcessManagerRing0.vcxproj.filters -------------------------------------------------------------------------------- /ProcessCreateCallBack/ProcessManagerRing0/ProcessManagerRing0.vcxproj.user: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/ProcessCreateCallBack/ProcessManagerRing0/ProcessManagerRing0.vcxproj.user -------------------------------------------------------------------------------- /ProcessCreateCallBack/ProcessManagerRing0/ProcessManagerRing0x64.sys: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/ProcessCreateCallBack/ProcessManagerRing0/ProcessManagerRing0x64.sys -------------------------------------------------------------------------------- /ProcessCreateCallBack/ProcessManagerRing0/ReadMe.txt: -------------------------------------------------------------------------------- 1 | the sys of the project 2 | -------------------------------------------------------------------------------- /ProcessCreateCallBack/ProcessManagerRing0/clean.bat: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/ProcessCreateCallBack/ProcessManagerRing0/clean.bat -------------------------------------------------------------------------------- /ProcessCreateCallBack/ProcessManagerRing0/ddkbuild.cmd: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/ProcessCreateCallBack/ProcessManagerRing0/ddkbuild.cmd -------------------------------------------------------------------------------- /ProcessCreateCallBack/ProcessManagerRing0/makefile: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/ProcessCreateCallBack/ProcessManagerRing0/makefile -------------------------------------------------------------------------------- /ProcessCreateCallBack/ProcessManagerRing0/mybuild.bat: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/ProcessCreateCallBack/ProcessManagerRing0/mybuild.bat -------------------------------------------------------------------------------- /ProcessCreateCallBack/ProcessManagerRing0/sources: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/ProcessCreateCallBack/ProcessManagerRing0/sources -------------------------------------------------------------------------------- /ProcessCreateCallBack/ReadMe.txt: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/ProcessCreateCallBack/ReadMe.txt -------------------------------------------------------------------------------- /ProtectFilex64/FileProtectX64.c: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/ProtectFilex64/FileProtectX64.c -------------------------------------------------------------------------------- /ProtectFilex64/FileProtectX64.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/ProtectFilex64/FileProtectX64.h -------------------------------------------------------------------------------- /ProtectFilex64/FileProtectX64.sln: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/ProtectFilex64/FileProtectX64.sln -------------------------------------------------------------------------------- /ProtectFilex64/FileProtectX64.suo: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/ProtectFilex64/FileProtectX64.suo -------------------------------------------------------------------------------- /ProtectFilex64/FileProtectX64.sys: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/ProtectFilex64/FileProtectX64.sys -------------------------------------------------------------------------------- /ProtectFilex64/FileProtectX64.vcxproj: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/ProtectFilex64/FileProtectX64.vcxproj -------------------------------------------------------------------------------- /ProtectFilex64/FileProtectX64.vcxproj.user: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/ProtectFilex64/FileProtectX64.vcxproj.user -------------------------------------------------------------------------------- /ProtectFilex64/ReadMe.txt: -------------------------------------------------------------------------------- 1 | Protect File in Windows 7 by ObRegisterCallbacks 2 | -------------------------------------------------------------------------------- /ProtectFilex64/clean.bat: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/ProtectFilex64/clean.bat -------------------------------------------------------------------------------- /ProtectFilex64/common.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/ProtectFilex64/common.h -------------------------------------------------------------------------------- /ProtectFilex64/ddkbuild.cmd: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/ProtectFilex64/ddkbuild.cmd -------------------------------------------------------------------------------- /ProtectFilex64/makefile: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/ProtectFilex64/makefile -------------------------------------------------------------------------------- /ProtectFilex64/mybuild.bat: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/ProtectFilex64/mybuild.bat -------------------------------------------------------------------------------- /ProtectFilex64/sources: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/ProtectFilex64/sources -------------------------------------------------------------------------------- /ProtectFilex64/struct.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/ProtectFilex64/struct.h -------------------------------------------------------------------------------- /ProtectFilex86/FileProtectX86.c: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/ProtectFilex86/FileProtectX86.c -------------------------------------------------------------------------------- /ProtectFilex86/FileProtectX86.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/ProtectFilex86/FileProtectX86.h -------------------------------------------------------------------------------- /ProtectFilex86/FileProtectX86.sln: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/ProtectFilex86/FileProtectX86.sln -------------------------------------------------------------------------------- /ProtectFilex86/FileProtectX86.suo: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/ProtectFilex86/FileProtectX86.suo -------------------------------------------------------------------------------- /ProtectFilex86/FileProtectX86.sys: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/ProtectFilex86/FileProtectX86.sys -------------------------------------------------------------------------------- /ProtectFilex86/FileProtectX86.vcxproj: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/ProtectFilex86/FileProtectX86.vcxproj -------------------------------------------------------------------------------- /ProtectFilex86/FileProtectX86.vcxproj.user: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/ProtectFilex86/FileProtectX86.vcxproj.user -------------------------------------------------------------------------------- /ProtectFilex86/ReadMe.txt: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/ProtectFilex86/ReadMe.txt -------------------------------------------------------------------------------- /ProtectFilex86/clean.bat: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/ProtectFilex86/clean.bat -------------------------------------------------------------------------------- /ProtectFilex86/common.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/ProtectFilex86/common.h -------------------------------------------------------------------------------- /ProtectFilex86/ddkbuild.cmd: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/ProtectFilex86/ddkbuild.cmd -------------------------------------------------------------------------------- /ProtectFilex86/makefile: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/ProtectFilex86/makefile -------------------------------------------------------------------------------- /ProtectFilex86/mybuild.bat: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/ProtectFilex86/mybuild.bat -------------------------------------------------------------------------------- /ProtectFilex86/sources: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/ProtectFilex86/sources -------------------------------------------------------------------------------- /ProtectFilex86/struct.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/ProtectFilex86/struct.h -------------------------------------------------------------------------------- /ProtectProcessx64/ProtectProcessx64.c: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/ProtectProcessx64/ProtectProcessx64.c -------------------------------------------------------------------------------- /ProtectProcessx64/ProtectProcessx64.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/ProtectProcessx64/ProtectProcessx64.h -------------------------------------------------------------------------------- /ProtectProcessx64/ProtectProcessx64.sln: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/ProtectProcessx64/ProtectProcessx64.sln -------------------------------------------------------------------------------- /ProtectProcessx64/ProtectProcessx64.suo: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/ProtectProcessx64/ProtectProcessx64.suo -------------------------------------------------------------------------------- /ProtectProcessx64/ProtectProcessx64.sys: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/ProtectProcessx64/ProtectProcessx64.sys -------------------------------------------------------------------------------- /ProtectProcessx64/ProtectProcessx64.vcxproj: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/ProtectProcessx64/ProtectProcessx64.vcxproj -------------------------------------------------------------------------------- /ProtectProcessx64/ProtectProcessx64.vcxproj.user: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/ProtectProcessx64/ProtectProcessx64.vcxproj.user -------------------------------------------------------------------------------- /ProtectProcessx64/ReadMe.txt: -------------------------------------------------------------------------------- 1 | Protect Process in Windows 7 by ObRegisterCallbacks 2 | -------------------------------------------------------------------------------- /ProtectProcessx64/clean.bat: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/ProtectProcessx64/clean.bat -------------------------------------------------------------------------------- /ProtectProcessx64/common.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/ProtectProcessx64/common.h -------------------------------------------------------------------------------- /ProtectProcessx64/ddkbuild.cmd: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/ProtectProcessx64/ddkbuild.cmd -------------------------------------------------------------------------------- /ProtectProcessx64/makefile: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/ProtectProcessx64/makefile -------------------------------------------------------------------------------- /ProtectProcessx64/mybuild.bat: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/ProtectProcessx64/mybuild.bat -------------------------------------------------------------------------------- /ProtectProcessx64/sources: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/ProtectProcessx64/sources -------------------------------------------------------------------------------- /ProtectProcessx64/struct.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/ProtectProcessx64/struct.h -------------------------------------------------------------------------------- /ReloadKernel-XP/ReadMe.txt: -------------------------------------------------------------------------------- 1 | Load ntoskrnl.exe to replace ServiceDescriptorTable 2 | -------------------------------------------------------------------------------- /ReloadKernel-XP/ReloadKernel.sln: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/ReloadKernel-XP/ReloadKernel.sln -------------------------------------------------------------------------------- /ReloadKernel-XP/ReloadKernel.suo: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/ReloadKernel-XP/ReloadKernel.suo -------------------------------------------------------------------------------- /ReloadKernel-XP/ReloadKernel/FileSystem.c: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/ReloadKernel-XP/ReloadKernel/FileSystem.c -------------------------------------------------------------------------------- /ReloadKernel-XP/ReloadKernel/FileSystem.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/ReloadKernel-XP/ReloadKernel/FileSystem.h -------------------------------------------------------------------------------- /ReloadKernel-XP/ReloadKernel/FixRelocation.c: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/ReloadKernel-XP/ReloadKernel/FixRelocation.c -------------------------------------------------------------------------------- /ReloadKernel-XP/ReloadKernel/FixRelocation.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/ReloadKernel-XP/ReloadKernel/FixRelocation.h -------------------------------------------------------------------------------- /ReloadKernel-XP/ReloadKernel/KernelReload.c: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/ReloadKernel-XP/ReloadKernel/KernelReload.c -------------------------------------------------------------------------------- /ReloadKernel-XP/ReloadKernel/KernelReload.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/ReloadKernel-XP/ReloadKernel/KernelReload.h -------------------------------------------------------------------------------- /ReloadKernel-XP/ReloadKernel/ReadMe.txt: -------------------------------------------------------------------------------- 1 | Reload Kernel in Windows XP 2 | -------------------------------------------------------------------------------- /ReloadKernel-XP/ReloadKernel/Reload.c: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/ReloadKernel-XP/ReloadKernel/Reload.c -------------------------------------------------------------------------------- /ReloadKernel-XP/ReloadKernel/Reload.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/ReloadKernel-XP/ReloadKernel/Reload.h -------------------------------------------------------------------------------- /ReloadKernel-XP/ReloadKernel/ReloadKernel.filters: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/ReloadKernel-XP/ReloadKernel/ReloadKernel.filters -------------------------------------------------------------------------------- /ReloadKernel-XP/ReloadKernel/ReloadKernel.sys: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/ReloadKernel-XP/ReloadKernel/ReloadKernel.sys -------------------------------------------------------------------------------- /ReloadKernel-XP/ReloadKernel/ReloadKernel.vcxproj: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/ReloadKernel-XP/ReloadKernel/ReloadKernel.vcxproj -------------------------------------------------------------------------------- /ReloadKernel-XP/ReloadKernel/ReloadKernel.vcxproj.filters: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/ReloadKernel-XP/ReloadKernel/ReloadKernel.vcxproj.filters -------------------------------------------------------------------------------- /ReloadKernel-XP/ReloadKernel/ReloadKernel.vcxproj.user: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/ReloadKernel-XP/ReloadKernel/ReloadKernel.vcxproj.user -------------------------------------------------------------------------------- /ReloadKernel-XP/ReloadKernel/sources: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/ReloadKernel-XP/ReloadKernel/sources -------------------------------------------------------------------------------- /SSDT-SSSDT-Manager/EnumSSSDTManager/EnumSSSDTManager.sln: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/SSDT-SSSDT-Manager/EnumSSSDTManager/EnumSSSDTManager.sln -------------------------------------------------------------------------------- /SSDT-SSSDT-Manager/EnumSSSDTManager/EnumSSSDTManager.suo: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/SSDT-SSSDT-Manager/EnumSSSDTManager/EnumSSSDTManager.suo -------------------------------------------------------------------------------- /SSDT-SSSDT-Manager/EnumSSSDTManager/EnumSSSDTManager/EnumSSSDTManager.aps: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/SSDT-SSSDT-Manager/EnumSSSDTManager/EnumSSSDTManager/EnumSSSDTManager.aps -------------------------------------------------------------------------------- /SSDT-SSSDT-Manager/EnumSSSDTManager/EnumSSSDTManager/EnumSSSDTManager.cpp: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/SSDT-SSSDT-Manager/EnumSSSDTManager/EnumSSSDTManager/EnumSSSDTManager.cpp -------------------------------------------------------------------------------- /SSDT-SSSDT-Manager/EnumSSSDTManager/EnumSSSDTManager/EnumSSSDTManager.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/SSDT-SSSDT-Manager/EnumSSSDTManager/EnumSSSDTManager/EnumSSSDTManager.h -------------------------------------------------------------------------------- /SSDT-SSSDT-Manager/EnumSSSDTManager/EnumSSSDTManager/EnumSSSDTManager.idc: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/SSDT-SSSDT-Manager/EnumSSSDTManager/EnumSSSDTManager/EnumSSSDTManager.idc -------------------------------------------------------------------------------- /SSDT-SSSDT-Manager/EnumSSSDTManager/EnumSSSDTManager/EnumSSSDTManager.rc: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/SSDT-SSSDT-Manager/EnumSSSDTManager/EnumSSSDTManager/EnumSSSDTManager.rc -------------------------------------------------------------------------------- /SSDT-SSSDT-Manager/EnumSSSDTManager/EnumSSSDTManager/EnumSSSDTManager.vcxproj: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/SSDT-SSSDT-Manager/EnumSSSDTManager/EnumSSSDTManager/EnumSSSDTManager.vcxproj -------------------------------------------------------------------------------- /SSDT-SSSDT-Manager/EnumSSSDTManager/EnumSSSDTManager/EnumSSSDTManager.vcxproj.filters: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/SSDT-SSSDT-Manager/EnumSSSDTManager/EnumSSSDTManager/EnumSSSDTManager.vcxproj.filters -------------------------------------------------------------------------------- /SSDT-SSSDT-Manager/EnumSSSDTManager/EnumSSSDTManager/EnumSSSDTManager.vcxproj.user: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/SSDT-SSSDT-Manager/EnumSSSDTManager/EnumSSSDTManager/EnumSSSDTManager.vcxproj.user -------------------------------------------------------------------------------- /SSDT-SSSDT-Manager/EnumSSSDTManager/EnumSSSDTManager/EnumSSSDTManagerDlg.cpp: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/SSDT-SSSDT-Manager/EnumSSSDTManager/EnumSSSDTManager/EnumSSSDTManagerDlg.cpp -------------------------------------------------------------------------------- /SSDT-SSSDT-Manager/EnumSSSDTManager/EnumSSSDTManager/EnumSSSDTManagerDlg.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/SSDT-SSSDT-Manager/EnumSSSDTManager/EnumSSSDTManager/EnumSSSDTManagerDlg.h -------------------------------------------------------------------------------- /SSDT-SSSDT-Manager/EnumSSSDTManager/EnumSSSDTManager/EnumSSSDTManagerx64.exe: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/SSDT-SSSDT-Manager/EnumSSSDTManager/EnumSSSDTManager/EnumSSSDTManagerx64.exe -------------------------------------------------------------------------------- /SSDT-SSSDT-Manager/EnumSSSDTManager/EnumSSSDTManager/EnumSSSDTManagerx86.exe: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/SSDT-SSSDT-Manager/EnumSSSDTManager/EnumSSSDTManager/EnumSSSDTManagerx86.exe -------------------------------------------------------------------------------- /SSDT-SSSDT-Manager/EnumSSSDTManager/EnumSSSDTManager/OpenDevice.cpp: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/SSDT-SSSDT-Manager/EnumSSSDTManager/EnumSSSDTManager/OpenDevice.cpp -------------------------------------------------------------------------------- /SSDT-SSSDT-Manager/EnumSSSDTManager/EnumSSSDTManager/OpenDevice.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/SSDT-SSSDT-Manager/EnumSSSDTManager/EnumSSSDTManager/OpenDevice.h -------------------------------------------------------------------------------- /SSDT-SSSDT-Manager/EnumSSSDTManager/EnumSSSDTManager/SSDT.cpp: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/SSDT-SSSDT-Manager/EnumSSSDTManager/EnumSSSDTManager/SSDT.cpp -------------------------------------------------------------------------------- /SSDT-SSSDT-Manager/EnumSSSDTManager/EnumSSSDTManager/SSDT.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/SSDT-SSSDT-Manager/EnumSSSDTManager/EnumSSSDTManager/SSDT.h -------------------------------------------------------------------------------- /SSDT-SSSDT-Manager/EnumSSSDTManager/EnumSSSDTManager/SSDTFunc.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/SSDT-SSSDT-Manager/EnumSSSDTManager/EnumSSSDTManager/SSDTFunc.h -------------------------------------------------------------------------------- /SSDT-SSSDT-Manager/EnumSSSDTManager/EnumSSSDTManager/SSSDT.cpp: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/SSDT-SSSDT-Manager/EnumSSSDTManager/EnumSSSDTManager/SSSDT.cpp -------------------------------------------------------------------------------- /SSDT-SSSDT-Manager/EnumSSSDTManager/EnumSSSDTManager/SSSDT.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/SSDT-SSSDT-Manager/EnumSSSDTManager/EnumSSSDTManager/SSSDT.h -------------------------------------------------------------------------------- /SSDT-SSSDT-Manager/EnumSSSDTManager/EnumSSSDTManager/SSSDTFunc.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/SSDT-SSSDT-Manager/EnumSSSDTManager/EnumSSSDTManager/SSSDTFunc.h -------------------------------------------------------------------------------- /SSDT-SSSDT-Manager/EnumSSSDTManager/EnumSSSDTManager/res/EnumSSSDTManager.ico: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/SSDT-SSSDT-Manager/EnumSSSDTManager/EnumSSSDTManager/res/EnumSSSDTManager.ico -------------------------------------------------------------------------------- /SSDT-SSSDT-Manager/EnumSSSDTManager/EnumSSSDTManager/res/EnumSSSDTManager.rc2: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/SSDT-SSSDT-Manager/EnumSSSDTManager/EnumSSSDTManager/res/EnumSSSDTManager.rc2 -------------------------------------------------------------------------------- /SSDT-SSSDT-Manager/EnumSSSDTManager/EnumSSSDTManager/res/ReadMe.txt: -------------------------------------------------------------------------------- 1 | R3 2 | -------------------------------------------------------------------------------- /SSDT-SSSDT-Manager/EnumSSSDTManager/EnumSSSDTManager/resource.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/SSDT-SSSDT-Manager/EnumSSSDTManager/EnumSSSDTManager/resource.h -------------------------------------------------------------------------------- /SSDT-SSSDT-Manager/EnumSSSDTManager/EnumSSSDTManager/stdafx.cpp: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/SSDT-SSSDT-Manager/EnumSSSDTManager/EnumSSSDTManager/stdafx.cpp -------------------------------------------------------------------------------- /SSDT-SSSDT-Manager/EnumSSSDTManager/EnumSSSDTManager/stdafx.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/SSDT-SSSDT-Manager/EnumSSSDTManager/EnumSSSDTManager/stdafx.h -------------------------------------------------------------------------------- /SSDT-SSSDT-Manager/EnumSSSDTManager/EnumSSSDTManager/targetver.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/SSDT-SSSDT-Manager/EnumSSSDTManager/EnumSSSDTManager/targetver.h -------------------------------------------------------------------------------- /SSDT-SSSDT-Manager/EnumSSSDTManagerRing0/GetService.c: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/SSDT-SSSDT-Manager/EnumSSSDTManagerRing0/GetService.c -------------------------------------------------------------------------------- /SSDT-SSSDT-Manager/EnumSSSDTManagerRing0/GetService.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/SSDT-SSSDT-Manager/EnumSSSDTManagerRing0/GetService.h -------------------------------------------------------------------------------- /SSDT-SSSDT-Manager/EnumSSSDTManagerRing0/ReadMe.txt: -------------------------------------------------------------------------------- 1 | the sys of the project 2 | -------------------------------------------------------------------------------- /SSDT-SSSDT-Manager/EnumSSSDTManagerRing0/SSDT.c: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/SSDT-SSSDT-Manager/EnumSSSDTManagerRing0/SSDT.c -------------------------------------------------------------------------------- /SSDT-SSSDT-Manager/EnumSSSDTManagerRing0/SSDT.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/SSDT-SSSDT-Manager/EnumSSSDTManagerRing0/SSDT.h -------------------------------------------------------------------------------- /SSDT-SSSDT-Manager/EnumSSSDTManagerRing0/SSSDT.c: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/SSDT-SSSDT-Manager/EnumSSSDTManagerRing0/SSSDT.c -------------------------------------------------------------------------------- /SSDT-SSSDT-Manager/EnumSSSDTManagerRing0/SSSDT.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/SSDT-SSSDT-Manager/EnumSSSDTManagerRing0/SSSDT.h -------------------------------------------------------------------------------- /SSDT-SSSDT-Manager/EnumSSSDTManagerRing0/SSSDTManager.c: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/SSDT-SSSDT-Manager/EnumSSSDTManagerRing0/SSSDTManager.c -------------------------------------------------------------------------------- /SSDT-SSSDT-Manager/EnumSSSDTManagerRing0/SSSDTManager.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/SSDT-SSSDT-Manager/EnumSSSDTManagerRing0/SSSDTManager.h -------------------------------------------------------------------------------- /SSDT-SSSDT-Manager/EnumSSSDTManagerRing0/SSSDTManager.sln: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/SSDT-SSSDT-Manager/EnumSSSDTManagerRing0/SSSDTManager.sln -------------------------------------------------------------------------------- /SSDT-SSSDT-Manager/EnumSSSDTManagerRing0/SSSDTManager.suo: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/SSDT-SSSDT-Manager/EnumSSSDTManagerRing0/SSSDTManager.suo -------------------------------------------------------------------------------- /SSDT-SSSDT-Manager/EnumSSSDTManagerRing0/SSSDTManager.vcxproj: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/SSDT-SSSDT-Manager/EnumSSSDTManagerRing0/SSSDTManager.vcxproj -------------------------------------------------------------------------------- /SSDT-SSSDT-Manager/EnumSSSDTManagerRing0/SSSDTManager.vcxproj.filters: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/SSDT-SSSDT-Manager/EnumSSSDTManagerRing0/SSSDTManager.vcxproj.filters -------------------------------------------------------------------------------- /SSDT-SSSDT-Manager/EnumSSSDTManagerRing0/SSSDTManager.vcxproj.user: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/SSDT-SSSDT-Manager/EnumSSSDTManagerRing0/SSSDTManager.vcxproj.user -------------------------------------------------------------------------------- /SSDT-SSSDT-Manager/EnumSSSDTManagerRing0/SSSDTManagerx64.sys: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/SSDT-SSSDT-Manager/EnumSSSDTManagerRing0/SSSDTManagerx64.sys -------------------------------------------------------------------------------- /SSDT-SSSDT-Manager/EnumSSSDTManagerRing0/SSSDTManagerx86.sys: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/SSDT-SSSDT-Manager/EnumSSSDTManagerRing0/SSSDTManagerx86.sys -------------------------------------------------------------------------------- /SSDT-SSSDT-Manager/EnumSSSDTManagerRing0/clean.bat: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/SSDT-SSSDT-Manager/EnumSSSDTManagerRing0/clean.bat -------------------------------------------------------------------------------- /SSDT-SSSDT-Manager/EnumSSSDTManagerRing0/common.c: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/SSDT-SSSDT-Manager/EnumSSSDTManagerRing0/common.c -------------------------------------------------------------------------------- /SSDT-SSSDT-Manager/EnumSSSDTManagerRing0/common.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/SSDT-SSSDT-Manager/EnumSSSDTManagerRing0/common.h -------------------------------------------------------------------------------- /SSDT-SSSDT-Manager/EnumSSSDTManagerRing0/ddkbuild.cmd: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/SSDT-SSSDT-Manager/EnumSSSDTManagerRing0/ddkbuild.cmd -------------------------------------------------------------------------------- /SSDT-SSSDT-Manager/EnumSSSDTManagerRing0/makefile: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/SSDT-SSSDT-Manager/EnumSSSDTManagerRing0/makefile -------------------------------------------------------------------------------- /SSDT-SSSDT-Manager/EnumSSSDTManagerRing0/mybuild.bat: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/SSDT-SSSDT-Manager/EnumSSSDTManagerRing0/mybuild.bat -------------------------------------------------------------------------------- /SSDT-SSSDT-Manager/EnumSSSDTManagerRing0/sources: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/SSDT-SSSDT-Manager/EnumSSSDTManagerRing0/sources -------------------------------------------------------------------------------- /SSDT-SSSDT-Manager/ReadMe.txt: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/SSDT-SSSDT-Manager/ReadMe.txt -------------------------------------------------------------------------------- /ZwQueryVirtualMemory/CommonR0.c: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/ZwQueryVirtualMemory/CommonR0.c -------------------------------------------------------------------------------- /ZwQueryVirtualMemory/CommonR0.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/ZwQueryVirtualMemory/CommonR0.h -------------------------------------------------------------------------------- /ZwQueryVirtualMemory/GetSSDTFuncAddress.c: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/ZwQueryVirtualMemory/GetSSDTFuncAddress.c -------------------------------------------------------------------------------- /ZwQueryVirtualMemory/GetSSDTFuncAddress.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/ZwQueryVirtualMemory/GetSSDTFuncAddress.h -------------------------------------------------------------------------------- /ZwQueryVirtualMemory/ReadMe.txt: -------------------------------------------------------------------------------- 1 | Enum Module By NtQueryVirtualMemory 2 | -------------------------------------------------------------------------------- /ZwQueryVirtualMemory/ZwQueryVirtualMemory.c: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/ZwQueryVirtualMemory/ZwQueryVirtualMemory.c -------------------------------------------------------------------------------- /ZwQueryVirtualMemory/ZwQueryVirtualMemory.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/ZwQueryVirtualMemory/ZwQueryVirtualMemory.h -------------------------------------------------------------------------------- /ZwQueryVirtualMemory/ZwQueryVirtualMemory.sln: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/ZwQueryVirtualMemory/ZwQueryVirtualMemory.sln -------------------------------------------------------------------------------- /ZwQueryVirtualMemory/ZwQueryVirtualMemory.suo: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/ZwQueryVirtualMemory/ZwQueryVirtualMemory.suo -------------------------------------------------------------------------------- /ZwQueryVirtualMemory/ZwQueryVirtualMemory.sys: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/ZwQueryVirtualMemory/ZwQueryVirtualMemory.sys -------------------------------------------------------------------------------- /ZwQueryVirtualMemory/ZwQueryVirtualMemory.vcxproj: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/ZwQueryVirtualMemory/ZwQueryVirtualMemory.vcxproj -------------------------------------------------------------------------------- /ZwQueryVirtualMemory/ZwQueryVirtualMemory.vcxproj.user: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/ZwQueryVirtualMemory/ZwQueryVirtualMemory.vcxproj.user -------------------------------------------------------------------------------- /ZwQueryVirtualMemory/clean.bat: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/ZwQueryVirtualMemory/clean.bat -------------------------------------------------------------------------------- /ZwQueryVirtualMemory/ddkbuild.cmd: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/ZwQueryVirtualMemory/ddkbuild.cmd -------------------------------------------------------------------------------- /ZwQueryVirtualMemory/makefile: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/ZwQueryVirtualMemory/makefile -------------------------------------------------------------------------------- /ZwQueryVirtualMemory/mybuild.bat: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/whitephone/Windows-Rootkits/HEAD/ZwQueryVirtualMemory/mybuild.bat --------------------------------------------------------------------------------