VX-API

VX-API copied to clipboard

Add NtQuerySystemInformation Hook

2

Some malware samples hide themselves from process lists by hooking the NtQuerySystemInformation function. I have not written this myself, but if any ideas are needed, this is one of them....

ghost

This commit fixes 3 typo errors about macro _WIN32 check in `GetPeb.cpp` & `GetCurrentProcessIdFromOffset.cpp` files

nuts7

fixed the else case so it's valid and not ignored.

jabra-

vxunderground

Implement memcmp

1

vxunderground

vxunderground

"Couple of race conditions I'm observing ( thread pool will likely start before it reaches the end of CreateTimerQueueTimer call chain, so I'd insert a blocking call and notify it...

vxunderground

ghost

A functionality for extracting user tokens; For impersonation and other techniques

rthxr

NUL0x4C