c++ header only library for usermode utils
Updated 1 year ago
Highly Modular Driver Mapper
Updated 1 year ago
elevate arbitrary MSR writes to kernel execution
Updated 1 year ago
force delete any file (and directory)
Updated 1 year ago
Type-2 Intel hypervisor for Windows 10 systems
Updated 1 year ago
hook all win32k syscalls with a single .data pointer swap
Updated 1 year ago
swap driver on disk and memory with a Microsoft driver.
Updated 1 year ago
inserts a PML4E where a prior PML4E is set to not present, pointing at the PDPT that contains the dll.
Updated 1 year ago
old probe from 6/xx/2020 to test theoretical page table concepts
Updated 1 year ago
run code in an address space not associated with a process.
Updated 1 year ago
/proc/kmem reimplementation for windows
Updated 1 year ago
Process Cloning
Updated 1 year ago
inject a process into your context.
Updated 1 year ago
Vulnerable Driver Manipulation
Updated 1 year ago
Process-Context Specific Kernel Driver Mapper (PSKDM)
Updated 1 year ago
PSKP - Process-Context Specific Kernel Patches
Updated 1 year ago
Paging Table Manipulation From Usermode
Updated 1 year ago
handle elevation using bedaisy. write up can be found here https://back.engineering/21/08/2020/
Updated 1 year ago
reverse engineering of bedaisy.sys (battleyes kernel driver)
Updated 1 year ago
header only library for NtLoadDriver/NtUnloadDriver.
Updated 1 year ago