PoC kernel to usermode injection
☆140Feb 26, 2024Updated 2 years ago
Alternatives and similar repositories for KernelInjector
Users that are interested in KernelInjector are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Kernel Level NMI Callback Blocker☆203Apr 23, 2026Updated 6 months ago
- Windows kernel driver demonstrating kernel-to-usermode communication via shared memory sections☆126Apr 24, 2026Updated 6 months ago
- Simple Kernelmode DLL Injector with Manual mapping☆372Nov 29, 2023Updated 2 years ago
- nmi stackwalking + module verification☆185Dec 28, 2023Updated 2 years ago
- Manual mapper that uses PTE manipulation, Virtual Address Descriptor (VAD) manipulation, and forceful memory allocation to hide executabl…☆421Jan 29, 2022Updated 4 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Kernel driver that .text hooks a syscall in dxgkrnl.sys which can be called from our user-mode client to send instructions like rpm/wpm a…☆237Dec 16, 2022Updated 3 years ago
- Kernel mode to user mode dll injection☆327Apr 10, 2021Updated 5 years ago
- A mapper that maps shellcode into loaded large page drivers☆374Apr 26, 2022Updated 4 years ago
- Loads a signed kernel driver which allows you to map any driver to kernel mode without any traces of the signed / mapped driver.☆420Aug 8, 2021Updated 5 years ago
- Communicate between user-mode and kernel-mode through a swapped QWORD pointer argument.☆208Feb 9, 2022Updated 4 years ago
- x64 Windows kernel driver mapper, inject unsigned driver using anycall☆232Feb 14, 2024Updated 2 years ago
- The sequel to Voyager☆116Aug 21, 2024Updated 2 years ago
- ☆381May 11, 2025Updated last year
- manual map unsigned driver over signed memory☆229Apr 11, 2024Updated 2 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- A simple UM + KM example of how to bypass EAC CR3☆219Oct 13, 2025Updated last year
- This is my EAC Bypass (Setup) Driver that offers an undetected communication and callback handler/hooking system through IOCTL.☆245Jul 3, 2026Updated 3 months ago
- filter driver to hide files and directories☆27Feb 12, 2024Updated 2 years ago
- A Kernel Driver that can be used for a cheat or malware base to circumvent common cache & structure table checks. PsLoadedModuleList howe…☆226Apr 23, 2026Updated 6 months ago
- 从MmPfnData中枚举进程和页目录基址☆230Aug 18, 2023Updated 3 years ago
- Fumo Loader - All in one kernel-based DLL injector☆418Jul 8, 2026Updated 3 months ago
- usermode driver mapper that forcefully loads any signed kernel driver (legit cert) with a big enough section (example: .data, .rdata) to …☆505Jan 3, 2022Updated 4 years ago
- Just tried, unusable☆71Oct 23, 2024Updated 2 years ago
- I've developed a rather effective driver for DLL injection targeting EAC Protected Games, and since i dont care for any notable games uti…☆109Apr 24, 2024Updated 2 years ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- ☆326Sep 23, 2026Updated last month
- Unknowncheats Magically Optimized Tidy Mapper using nvaudio☆169Jun 11, 2024Updated 2 years ago
- ☆48Jul 7, 2024Updated 2 years ago
- Manual mapping without creating any threads, with rw only access☆846Oct 29, 2019Updated 6 years ago
- cr3 shuffle driver☆100Mar 24, 2024Updated 2 years ago
- x64 Windows kernel code execution via user-mode, arbitrary syscall, vulnerable IOCTLs demonstration☆427Jul 6, 2022Updated 4 years ago
- This is a simple project of a driver + usermode.☆182Jan 31, 2022Updated 4 years ago
- Hijacking Hyper-V at Runtime with DDMA☆159Aug 13, 2025Updated last year
- The program draws with win32k gdi functions in the kernel while NtGdiDdDDISubmitCommand is being hooked.☆359Apr 27, 2020Updated 6 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- My EAC & BE Rady CR3 Reading & Writing source that I use for my KM Drivers.☆135Jul 3, 2026Updated 3 months ago
- Anti-Rootkit/Anti-Cheat Driver to uncover unbacked or hidden kernel code.☆361Mar 12, 2026Updated 7 months ago
- Windows kernel driver that detects hypervisors by probing SIDT/LIDT edge cases, paging/TLB behaviors, privilege transitions, and timing e…☆50Mar 3, 2026Updated 7 months ago
- A basic demonstration of directly overwriting paging structures for physical memory r/w and interprocess memory copy☆106Jun 26, 2023Updated 3 years ago
- Unsigned driver loader using CVE-2018-19320☆386Mar 16, 2026Updated 7 months ago
- This is a repo of my previous BEKernelDriver but updated to add better protections and a more detailed setup. also with a good bit of cod…☆172Apr 23, 2026Updated 6 months ago
- just proof of concept. hooking MmCopyMemory PG safe.☆100Nov 13, 2023Updated 2 years ago