Skip to content

Windows kernel mode driver to prevent detection of debuggers.

Notifications You must be signed in to change notification settings

Pai-Po/VirtualDbgHide

 
 

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

44 Commits
 
 
 
 
 
 
 
 
 
 

Repository files navigation

VirtualDbgHide

Windows kernel mode driver using Intel's hardware virtualization to hook MSR_LSTAR (system call handler). Currently bypasses PatchGuard on Windows 8.1.

About

Windows kernel mode driver to prevent detection of debuggers.

Resources

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published

Languages

  • C 53.0%
  • C++ 40.7%
  • Assembly 6.3%