Ahora57 / VMP_UTIL
PoC over some VMP features
☆16Updated 9 months ago
Related projects ⓘ
Alternatives and complementary repositories for VMP_UTIL
- sample bypass anti-anti-debug tool by race condition☆25Updated 2 years ago
- Freeze target threads (external - internal ) by avoiding SuspendThread detections. Or access registers from start address.☆30Updated 7 months ago
- Kernel Level NMI Callback Blocker☆32Updated 2 months ago
- just proof of concept. hooking MmCopyMemory PG safe.☆63Updated last year
- PAGE_GUARD based hooking library☆40Updated 2 years ago
- page table manipulation to gain physical r/w☆38Updated 6 months ago
- ☆32Updated 2 years ago
- KDM Is a driver that will dumps every drivers that got manually mapped with kdmapper.☆48Updated 2 years ago
- ☆15Updated 3 years ago
- Old project (2020) reformed. Modifies gRT->GetVariable sub function from EFI_APPLICATION. Tested on Win10 22H2 (AMD).☆45Updated 8 months ago
- Create stealthy, inline, EPT-like hooks using SMAP and SMEP☆33Updated last month
- Old way for blocking NMI interrupts☆25Updated 2 years ago
- ☆70Updated 2 years ago
- Improved VMP Idea(detect anti-anti-debug tools by bug)☆40Updated last year
- Handling C++ & __try exceptions without the need of built-in handlers.☆65Updated 3 years ago
- A lightweight BattlEye emulator of the launcher☆57Updated 2 years ago
- ☆24Updated last month
- ☆28Updated last year
- POC Hook of nt!HvcallCodeVa☆50Updated last year
- ntoskrnl .data hooks for UM-KM communication☆34Updated 5 months ago
- A basic 100 loc CPU emulator using the existing code of ntoskrnl.exe☆69Updated last year
- ☆55Updated last year
- Windows PDB parser for kernel-mode environment.☆90Updated last year
- ☆21Updated 2 weeks ago
- Just check hypervisor in ring0☆15Updated last year
- Kernel ReClassEx☆63Updated last year