Skip to content

Instantly share code, notes, and snippets.

View 0xntpower's full-sized avatar

ntpower 0xntpower

View GitHub Profile

Syscall Provider

Background

SyscallProvider is a feature available from Windows 11 22H2, that allows for inline hooking of syscalls.
This unfinished research was done on Windows 11 22H2. The feature is fully undocumented at the moment and it looks like it's locked to Microsoft-signed drivers.
All of the information here was gathered by manual reverse engineering of securekernel.exe, skci.dll and ntoskrnl.exe.
The kernel exports three functions to work with the new feature: PsRegisterSyscallProvider, PsQuerySyscallProviderInformation, PsUnregisterSyscallProvider.
This writeup will explore how this feature is initialized, how it works internally, and how to interact with it and use it.

@jdah
jdah / network_demo.c
Created January 31, 2024 14:22
the world's most basic client/server
#include <stdio.h>
#include <string.h>
#include <arpa/inet.h>
#include <sys/socket.h>
#include <netdb.h>
#include <unistd.h>
static void server() {
// create socket
@Hazsi
Hazsi / VapeV4Wine.MD
Last active May 5, 2026 12:53
Guide to using Vape V4 on Linux/macOS under Wine.

Hello there! 👋

Despite the fact that many people on the forums have said it isn't possible, using the latest version of Vape V4 on Linux via Wine is very much possible, and I was able to do it in under an hour of trial and error. I'm using Pop OS, but you can likely get it to work with any version of Linux (and potentially macOS, although I haven't tried).

Of course, this is obviously not supported. If this doesn't work for you, I can try my best to help, but obviously Manthe/Vape support will not help you at all. Please do not bother them with this. Some features may be broken; I'm personally struggling to get profile saving to work correctly (I'm not sure why)

If you're looking for a crack or anything like that, you won't find that here. You obviously need to own Vape for this to work.

1. Installing Wine.

First things first, you need to install Wine. If you don't know, Wine is a free and open source program that attempts to allow Windows software to run on UNIX like operating systems (Linu

@jdah
jdah / .vimrc
Created June 14, 2021 11:54
jdh's NeoVim .vimrc
call plug#begin()
Plug 'drewtempelmeyer/palenight.vim'
Plug 'vim-airline/vim-airline'
Plug 'wlangstroth/vim-racket'
Plug 'sheerun/vim-polyglot'
Plug 'rust-lang/rust.vim'
Plug 'preservim/tagbar'
Plug 'universal-ctags/ctags'
Plug 'luochen1990/rainbow'
Plug 'vim-syntastic/syntastic'
package me.minidigger.dumpa;
import java.io.File;
import java.io.FileOutputStream;
import java.lang.instrument.ClassFileTransformer;
import java.lang.instrument.IllegalClassFormatException;
import java.lang.instrument.Instrumentation;
import java.security.ProtectionDomain;
import java.util.Arrays;
import java.util.stream.Collectors;
@MiniDigger
MiniDigger / gist:efd80633b50b06f4677b4be5552b4aa8
Created June 16, 2018 13:40 — forked from psayre23/gist:c30a821239f4818b0709
Runtime Complexity of Java Collections
Below are the Big O performance of common functions of different Java Collections.
List | Add | Remove | Get | Contains | Next | Data Structure
---------------------|------|--------|------|----------|------|---------------
ArrayList | O(1) | O(n) | O(1) | O(n) | O(1) | Array
LinkedList | O(1) | O(1) | O(n) | O(n) | O(1) | Linked List
CopyOnWriteArrayList | O(n) | O(n) | O(1) | O(n) | O(1) | Array