4l3x777 / dse_pg_bypassLinks
DSE & PG bypass via BYOVD attack
☆77Updated 6 months ago
Alternatives and similar repositories for dse_pg_bypass
Users that are interested in dse_pg_bypass are comparing it to the libraries listed below
Sorting:
- nmi stackwalking + module verification☆155Updated 2 years ago
- Translate virtual addresses to physical addresses from usermode.☆98Updated last year
- Demystifying PatchGuard is a comprehensive analysis of Microsoft's security feature called PatchGuard, which is designed to prevent unaut…☆132Updated 2 years ago
- Hooking Windows' exception dispatcher to protect process's PML4☆223Updated last year
- ntoskrnl .data hooks for UM-KM communication☆53Updated last year
- browse microsoft driver server for potentially vulnerable drivers☆30Updated last year
- Kernel Level NMI Callback Blocker☆154Updated 4 months ago
- Experiment with PAGE_GUARD protection to hide memory from other processes☆54Updated last year
- load unsigned kernel-driver by patching dse in 248 lines☆139Updated last year
- Unknowncheats Magically Optimized Tidy Mapper using nvaudio☆148Updated last year
- A simple tool to assemble shellcode ready to be copy-pasted into code☆71Updated 3 years ago
- manual map unsigned driver over signed memory☆214Updated last year
- Kernel driver for detecting Intel VT-x hypervisors.☆192Updated 2 years ago
- Abusing DDMA alongside Copy On Write for Cross Process Code Execution for a 3000$ Bug Bounty☆82Updated 3 weeks ago
- ☆83Updated last year
- A library to assist with memory & code protection.☆65Updated last year
- Create stealthy, inline, EPT-like hooks using SMAP and SMEP☆60Updated last year
- Windows PDB parser for kernel-mode environment.☆103Updated 7 months ago
- ☆158Updated last year
- Freeze target threads (external - internal ) by avoiding SuspendThread detections. Or access registers from start address.☆34Updated last year
- "Bypassing" HVCI via donor PFN swaps to modify read-only code pages. Call chained kernel functions (kCET and SLAT support), modify read-o…☆36Updated 2 weeks ago
- ☆37Updated last year
- just proof of concept. hooking MmCopyMemory PG safe.☆81Updated 2 years ago
- Using MMIO (Memory-Mapped I/O) to read TPM 2.0 public Endorsement Key.☆52Updated last year
- ZeroImport is a lightweight and easy to use C++ library for Windows Kernel Drivers. It allows you to hide any import in your kernel drive…☆50Updated 2 years ago
- Virtual and physical memory hacking library using gigabyte vulnerable driver☆70Updated 2 years ago
- A Hyper-V Hacking Framework For Windows 10 x64 (AMD & Intel)☆136Updated 2 years ago
- IoCreateDriver Implementation, it can be useful if you're trying to bypass anticheats☆120Updated last month
- The sequel to Voyager☆89Updated last year
- Archive R/W into any protected process by changing the value of KTHREAD->PreviousMode☆163Updated 3 years ago