pdolinic / UnhookingPatch Public

Notifications You must be signed in to change notification settings
Fork 31
Star 7

Bypass EDR Hooks by patching NT API stub, and resolving SSNs and syscall instructions at runtime

7 stars 31 forks Branches Tags Activity

Notifications

Name		Name	Last commit message	Last commit date
Latest commit History 5 Commits
UnhookingPatch		UnhookingPatch
README.md		README.md

Repository files navigation

UnhookingPatch

Bypass EDR Hooks by patching NT API stub, and resolving SSNs and syscall instructions at runtime

References

Reenz0h - HalosGate

https://blog.sektor7.net/#!res/2021/halosgate.md

About

Bypass EDR Hooks by patching NT API stub, and resolving SSNs and syscall instructions at runtime

Report repository

Releases

No releases published

Packages

No packages published

Languages