UIWP0 / UnhookingPatch Public

forked from pdolinic/UnhookingPatch

Notifications You must be signed in to change notification settings
Fork 0
Star 1

Bypass EDR Hooks by patching NT API stub, and resolving SSNs and syscall instructions at runtime

1 star 32 forks Branches Tags Activity

Name		Name	Last commit message	Last commit date
Latest commit History 5 Commits
UnhookingPatch		UnhookingPatch
README.md		README.md

Repository files navigation

UnhookingPatch

Bypass EDR Hooks by patching NT API stub, and resolving SSNs and syscall instructions at runtime

References

Reenz0h - HalosGate

https://blog.sektor7.net/#!res/2021/halosgate.md