inosec2 / iat_unhook_sample Goto Github PK
View Code? Open in Web Editor NEWThis project forked from signal-labs/iat_unhook_sample
(First Public?) Sample of unhooking ntdll (All Exports & IAT imports) hooks in Rust using in-memory disassembly, avoiding direct syscalls and all hooked functions (incl. hooked NtProtectVirtualMemory)
License: GNU General Public License v3.0