0mWindyBug/DataptrHooks
ntoskrnl .data hooks for UM-KM communication
swap the function pointer in NtCompareSigningLevels for undetected driver communication.
Appears on
Quick read
Latest capture 2026-07-29 03:09
0 paths
Agent instructions and tool configuration found in this repository.
No config files detected.
3 observed captures since 2026-06-24. Charts use measured snapshots only.
Stars from first capture -1
All tracked data
Observed snapshots
Observed snapshots
Nearest indexed repositories by embedding similarity.
ntoskrnl .data hooks for UM-KM communication
load unsigned kernel-driver by patching dse in 242 lines
Hide Driver,win7*64
Disable NMI Callbacks with Kernelmode Driver
Use lief, keystone and capstone to manually inline hook elf(libil2cpp.so)
Simple Null's driver detector