A Rust port of LayeredSyscall — performs indirect syscalls while generating legitimate API call stack frames by abusing VEH.
-
Updated
Oct 31, 2024 - Rust
#
hardware-breakpoint
Here are 7 public repositories matching this topic...
Bypassing all EDR hooks while maintaining the cleanest callstack of all time with proxy calls and an exception handler.
c windows kernel syscalls low-level callstack syscall shellcode-loader exception-handling vectored-exception-handling shellcode-injection unhooking edr-bypass edr-evasion hardware-breakpoint direct-syscalls indirect-syscalls callstack-spoofing hook-evasion trap-flag
-
Updated
Apr 5, 2026 - C
Correlating kernel notifications with the lack of ETW events to detect ETW Patching
detection red inline etw team hooking red-team patching blue-team red-teaming detection-engineering amsi-bypass red-team-tools blue-team-tool hwbp hardware-breakpoint hwbp-evasion event-tracing inline-patching
-
Updated
Mar 14, 2026 - C++
三角洲行动 x64 范围辅助 DLL 源码，通过硬件断点与 Process Instrumentation Callback 在运行时替换目标浮点参数。
windows visual-studio dll cpp x64 reverse-engineering masm delta-force hardware-breakpoint instrumentation-callback
-
Updated
Aug 14, 2026 - C++
A PICO for Crystal Palace that implements hardware breakpoint hooking.
-
Updated
Dec 8, 2025 - C
Windows x64 VEH hook library with PageGuard and debug-register backends.
windows hook dll x64 c-api veh hardware-breakpoint vectored-exception-handler pageguard debug-register
-
Updated
Jul 21, 2026 - C++
A demo of a Structured/Vectored Exception Handler hook using the Debug Registers to trigger an exception.
-
Updated
Nov 10, 2024 - C++
Improve this page
Add a description, image, and links to the hardware-breakpoint topic page so that developers can more easily learn about it.
Add this topic to your repo
To associate your repository with the hardware-breakpoint topic, visit your repo's landing page and select "manage topics."