Rare find

BamExtensionTableHook. Proof-of-concept kernel driver that hijacks the Windows kernel extension table mechanism to preserve process notify callbacks even when attackers disable standard process notify callbacks.

github.com/Dor00tkit/BamExtensionTableHook

Vaya's read on this project

Problem, audience, market, and the verdict — sign in to see it.

Updates

No recent activity.