Illustration drawn by RepoMasters from the repo’s ID and its language color. Credits
PrototypeCommon

Dor00tkit/BamExtensionTableHook

Proof-of-concept kernel driver that hijacks the Windows kernel extension table mechanism to preserve process notify callbacks even when attackers disable standard process notify callbacks.

Owner
Dor00tkit (personal account)
Stars
Stars: 100
Forks
Forks: 12
Language
C
License
None
Created
2025
Tier
Prototype (100 to 249 ★) What this tier means
View on GitHub

More repos by Dor00tkit

All 2 repos by Dor00tkit

Nearby in C

All C repos