0mWindyBug / KernelInjector
PoC kernel to usermode injection
☆59Updated 8 months ago
Related projects ⓘ
Alternatives and complementary repositories for KernelInjector
- Experiment with PAGE_GUARD protection to hide memory from other processes☆39Updated 4 months ago
- ntoskrnl .data hooks for UM-KM communication☆34Updated 5 months ago
- Allows for same-file KernelMode function execution using Encrypted addresses of Functions☆23Updated last month
- Kernel Level NMI Callback Blocker☆32Updated 2 months ago
- A simple kernel driver for R/W Using kSockets with some bypass implementation overall I wouldn't say its "ud"☆44Updated 2 months ago
- Injecting dll to protected games using ioclt and code cave communications, works on eac, be protected games but made for fn☆53Updated 7 months ago
- This is an EfiGuard BootLoader that can boot EfiGuard from Usermode with no USB or Setup as a Single Executable with automatic File Dumpi…☆30Updated 2 months ago
- ZeroImport is a lightweight and easy to use C++ library for Windows Kernel Drivers. It allows you to hide any import in your kernel drive…☆46Updated last year
- Freeze target threads (external - internal ) by avoiding SuspendThread detections. Or access registers from start address.☆30Updated 7 months ago
- POC Hook of nt!HvcallCodeVa☆50Updated last year
- A method to Disable DSE using .data ptr hooks☆26Updated 9 months ago
- A Kernel Driver that can be used for a cheat or malware base to circumvent common cache & structure table checks. PsLoadedModuleList howe…☆74Updated 2 months ago
- A simple direct syscall wrapper written in C++ with compatibility for x86 and x64 programs.☆42Updated last year
- DSE & PG bypass via BYOVD attack☆37Updated 7 months ago
- Compileable POC of namazso's x64 return address spoofer.☆47Updated 4 years ago
- ☆24Updated last month
- My EAC & BE Rady CR3 Reading & Writing source that I use for my KM Drivers.☆44Updated 2 months ago
- CVE-2022-3699 with arbitrary kernel code execution capability☆70Updated last year
- Patches DSE by swapping both data ptrs located in SeValidateImageHeader && SeValidateImageData☆19Updated 9 months ago
- This is my EAC Bypass (Setup) Driver that offers an undetected communication and callback handler/hooking system through IOCTL.☆70Updated 2 months ago
- A library to assist with memory & code protection.☆53Updated 8 months ago
- PAGE_GUARD based hooking library☆40Updated 2 years ago
- partially disable patchguard up to win11 21H2☆16Updated 5 months ago
- clearing traces of a loaded driver☆44Updated 2 years ago
- A basic demonstration of directly overwriting paging structures for physical memory r/w and interprocess memory copy☆80Updated last year
- A simple MmCopyMemory hook.☆33Updated 2 years ago
- An Undetected BE Kernel Driver I developed, Will probably be detected upon releasing this but can be made undetected very easily. Does no…☆54Updated 2 months ago
- hidden_syscall - syscaller without using syscall instruction in code☆58Updated last year