Skip to content
#

cabinet-api

Star

Here is 1 public repository matching this topic...

wesmar / ForceIO

Star 2

ForceIO: Standalone no-CRT C tool for minifilter-bypass file operations (delete/move/copy) on Windows 11. Routes kernel I/O below WdFilter.sys via WHCP-signed IObitUnlocker.sys. Atomic ephemeral SCM sessions, FDI/LZX in-memory decompression from application icon, build-time PE overlay checksum bypass. Full RE writeup with source and binaries

reverse-engineering windows-kernel infosec kernel-driver ioctl file-operations security-research windows-defender deviceiocontrol windows-11 no-crt byovd signed-driver scm-service minifilter-bypass wdfilter whcp pe-checksum driver-validation cabinet-api
  • Updated Jun 25, 2026
  • C

Improve this page

Add a description, image, and links to the cabinet-api topic page so that developers can more easily learn about it.

Curate this topic

Add this topic to your repo

To associate your repository with the cabinet-api topic, visit your repo's landing page and select "manage topics."

Learn more