Rare find

iat_unhook_sample. (First Public?) Sample of unhooking ntdll (All Exports & IAT imports) hooks in Rust using in-memory disassembly, avoiding direct syscalls and all hooked functions (incl. hooked NtProtectVirtualMemory)

github.com/Signal-Labs/iat_unhook_sample

Problem

Audience

Updates

No founder updates yet. Check back soon.