DLL that hooks the NtQuerySystemInformation API and hides a process name
-
Updated
May 12, 2023 - C
DLL that hooks the NtQuerySystemInformation API and hides a process name
Simple NtQuerySystemInformation hook for your hacking apps.
Research-focused userland proof-of-concept demonstrating API hooking of NtQuerySystemInformation to analyze and manipulate SYSTEM_PROCESS_INFORMATION structures. The project explores DKOM-style process hiding techniques to better understand Windows internals, detection gaps, and blue-team countermeasures in controlled lab environments only.
Add a description, image, and links to the ntquerysysteminformation-api topic page so that developers can more easily learn about it.
To associate your repository with the ntquerysysteminformation-api topic, visit your repo's landing page and select "manage topics."