6
0
mirror of https://github.com/JKornev/hidden synced 2024-06-20 14:08:05 +00:00
Go to file
2016-09-11 14:42:39 +03:00
Hidden Added path conversion to NT path to the FS filter interface 2016-09-11 14:40:33 +03:00
Hidden Package initial commit 2016-07-22 02:02:31 +03:00
HiddenCLI Added exclude\protect list loading from HiddenCLI to driver 2016-09-05 22:30:26 +03:00
HiddenLib Added path conversion to NT path to the FS filter interface 2016-09-11 14:40:33 +03:00
HiddenTests Added the HiddenTests project that contain different tests for this solution 2016-09-11 14:42:39 +03:00
.gitignore Added IOCTLs for the part of Ps API 2016-09-01 01:28:24 +03:00
Hidden.sln Added the HiddenTests project that contain different tests for this solution 2016-09-11 14:42:39 +03:00
README.md Update README.md 2016-08-28 00:04:49 +03:00

Hidden

This toolset developed like a solution for my reverse engineering and researching tasks. This is a very simple windows driver with a usermode interface which uses for hidding specific environment on VMs, like installed rce programs (ex. procmon, wireshark), vm infrastracture (ex. vmware tools) and etc.

Features:

  • hide registry keys and values
  • hide files and directories
  • protect specific processes using ObRegisterCallbacks
  • exclude specific processes from hidding and protection features
  • usermode interface (lib and cli) for working with driver

and so on