DLL that hooks the NtQuerySystemInformation API and hides a process name
-
Updated
May 12, 2023 - C
#
ring-3
Here are 5 public repositories matching this topic...
🐧 Assembly with Linux (Notes, Syscalls, Protection Rings) 🐧
linux kernel-module assembly read linux-kernel write kernel-mode syscalls nasm ring0 usermode nasm-assembly systemcalls ring3 systemcall ring-0 ring-3 privileged-instruction protection-ring privilege-levels
-
Updated
Feb 29, 2024 - Assembly
Different API Hooking Techniques - Ring3 (Detours, Trampoline, IAT and EAT) for both, x64 and x32 PE files - Since 2014.
-
Updated
Jan 19, 2025 - C++
Ring -4 to Ring 0: offense-defense firmware research platform. We build the bootkits, then we catch them. Closed-loop. Zero trust in silicon.
python c rust security cpu kernel kernel-module rootkit malware uefi ring-buffer low-level microcode offensive-security bootkit uefi-boot defensive-security uefi-development ring-3 ring-4
-
Updated
Jul 11, 2026 - Rust
Real-time Intel ME/CSME Ring -3 monitor — HECI bus probing, firmware registers, MEI clients, PMT telemetry. Read-only, zero risk. FastAPI + React, 19-section dashboard.
-
Updated
Sep 6, 2026 - Python
Add this topic to your repo
To associate your repository with the ring-3 topic, visit your repo's landing page and select "manage topics."