Signal-Labs/iat_unhook_sample

(First Public?) Sample of unhooking ntdll (All Exports & IAT imports) hooks in Rust using in-memory disassembly, avoiding direct syscalls and all hooked functions (incl. hooked NtProtectVirtualMemory)

语言：Rust · GitHub 星标：140 · Fork：19

在 GitHub 上查看原仓库