Illustration drawn by RepoMasters from the repo’s ID and its language color. Credits

AlphaUncommon

SaadAhla/dark-kill

A user-mode code and its rootkit that will Kill EDR Processes permanently by leveraging the power of Process Creation Blocking Kernel Callback Routine registering and ZwTerminateProcess.

Owner: SaadAhla (personal account)
Stars: Stars: 267
Forks: Forks: 51
Language: C++
License: None
Created: 2025
Topics: malwaremalware-developmentredteamrootkitwindows
Tier: Alpha (250 to 699 ★) What this tier means

View on GitHub

More repos by SaadAhla

All 18 repos by SaadAhla

SaadAhla/FilelessPELoaderStars: 1,043C++Beta
SaadAhla/Shellcode-HideStars: 442C++Alpha
SaadAhla/TakeMyRDPStars: 399C++Alpha
SaadAhla/D1rkLdrStars: 322C++Alpha
SaadAhla/UnhookingPatchStars: 307C++Alpha
SaadAhla/NTDLLReflectionStars: 306C++Alpha

Nearby in C++

All C++ repos

PacktPublishing/The-Modern-Vulkan-CookbookStars: 267C++Alpha
EricWang12/PartUVStars: 267C++Alpha
hackerhouse-opensource/SetupHijackStars: 267C++Alpha
TooTallNate/node-iOSStars: 267C++Alpha
TritonDataCenter/v8plusStars: 267C++Alpha
BenLangmead/bowtieStars: 267C++Alpha