A c++ header only library for inline hooking. Supports x86_64, x86, and arm. Small, simple, and easily detected :)
Updated 3 years ago
systematic exploitation of physical read/write to map unsigned code into the kernel.
Updated 3 years ago
driver dumper for manually mapped drivers mapped with kdmapper.
Updated 3 years ago
header only library for manually mapping dll's.
Updated 3 years ago
unfairgames reverse engineered.
Updated 3 years ago
header only library for NtLoadDriver/NtUnloadDriver.
Updated 3 years ago
reverse engineering of bedaisy.sys (battleyes kernel driver)
Updated 3 years ago
handle elevation using bedaisy. write up can be found here https://back.engineering/21/08/2020/
Updated 3 years ago
Paging Table Manipulation From Usermode
Updated 3 years ago
PSKP - Process-Context Specific Kernel Patches
Updated 3 years ago
Process-Context Specific Kernel Driver Mapper (PSKDM)
Updated 3 years ago
Vulnerable Driver Manipulation
Updated 3 years ago
inject a process into your context.
Updated 3 years ago
Process Cloning
Updated 3 years ago
/proc/kmem reimplementation for windows
Updated 3 years ago
run code in an address space not associated with a process.
Updated 3 years ago
old probe from 6/xx/2020 to test theoretical page table concepts
Updated 3 years ago
inserts a PML4E where a prior PML4E is set to not present, pointing at the PDPT that contains the dll.
Updated 3 years ago
swap driver on disk and memory with a Microsoft driver.
Updated 3 years ago
hook all win32k syscalls with a single .data pointer swap
Updated 3 years ago