/Hackshield-Driver-Bypass

Bypass HackShield several specific SSDT hook in Ring0

Primary LanguageC

Hackshield Bypass for Windows Xp/7

Windows Driver Source

Building environment : WDK 7600.16385.1
Platform : Windows XP/7 x86

Bypass several specific ssdt hook after loading EagleXNT.sys

  • NtOpenProcess
  • NtReadVirtualMemory
  • NtWriteVirtualMemory
  • NtProtectVirtualMemory