Contact person: Business Client

Phone:Show

Email:Show

Location: Pune, India

Budget: Recommended by industry experts

Time to start: As soon as possible

Project description:
"I am looking for a highly skilled Windows kernel-mode developer with proven experience in low-level Windows internals, DKOM (Direct Kernel Object Manipulation), and C++ driver development.
The goal is to implement a persistent process hiding solution that:

Uses a kernel driver (.sys) to hide a specific process via unlinking its EPROCESS from the active process list (DKOM).
Includes a user-mode Windows Service (C++ executable) that runs as SYSTEM, auto-starts on boot, loads the driver, launches a target application silently (no window), and instructs the driver to hide its PID.
Ensures hiding survives reboots automatically.
Works reliably on Windows 11 (24H2/25H2 builds).

Note: This is for educational and testing purposes only in a virtual machine environment. No malicious use.
Required Skills & Experience

Expert in Windows kernel driver development (WDK, Visual Studio 2022+, KMDF/WDM).
Deep knowledge of Windows internals (EPROCESS, ActiveProcessLinks, PsLookupProcessByProcessId, etc.).
Experience with DKOM process hiding (dynamic offset calculation – no hardcoding).
Proficient in C++ for both kernel and user-mode code.
IOCTL communication between service and driver.
Windows Service development (auto-start, running as SYSTEM).
Silent process launch (CREATE_NO_WINDOW, DETACHED_PROCESS).
Debugging with WinDbg/DbgView.
Test signing and loading unsigned drivers.

Deliverables

Full source code (Visual Studio solutions/projects) for:
Kernel driver (.sys) with IOCTL support and dynamic offset finding.
Windows Service executable that loads driver, launches target app silently, hides PID.

Compiled Release x64 binaries (.sys + .exe).
Installation instructions (install/uninstall service, enable test signing).
Testing proof:
Screenshots/videos showing the target process running but invisible in Task Manager, Process Explorer, tasklist (before/after reboot).
DbgView logs confirming offsets and hiding.

Add a license/comment block at the top of all source files with:text/*
* Licensed to [My Company] - Private Use Only


Additional Requirements

I will provide detailed step-by-step guide, full working prototype code, and all necessary references.
You must follow the provided structure closely, test thoroughly in a VM, and fix any issues (e.g., offsets for your Windows build).
Replace placeholder target app path with a configurable one (or use a test exe).
Ensure no BSOD/crashes and clean unload.

Note: I will provide you code and step." (client-provided description)