Azvanzed / vmw-logger-rs
A VMWare logger using built-in backdoor.
☆29Updated 6 months ago
Alternatives and similar repositories for vmw-logger-rs
Users that are interested in vmw-logger-rs are comparing it to the libraries listed below
Sorting:
- Rust bindings for VMProtect.☆25Updated last year
- PEIM (UEFI) bootkit targeting OVMF (EDK2)☆34Updated last year
- Tiny driver patch to allow kernel callbacks to work on Win10 21h1☆34Updated 3 years ago
- Report and exploit of CVE-2024-21305.☆34Updated last year
- Demonstrate calling a kernel function and handle process creation callback against HVCI☆53Updated 2 years ago
- ☆10Updated 3 years ago
- Finding Truth in the Shadows☆92Updated 2 years ago
- An improved version of Patch Guard that I implemented, that includes integrity checks and other protection mechanisms I added.☆62Updated last month
- A kernel exploit leveraging NtUserHardErrorControl to elevate a thread to KernelMode and achieve arbitrary kernel R/W & more.☆28Updated 2 years ago
- ☆38Updated 2 months ago
- A minimalistic logger for Windows Kernel Drivers.☆22Updated last year
- ☆46Updated last month
- A KISS Rust crate to parse Windows kernel crash-dumps created by Windows & its debugger.☆34Updated 3 months ago
- An example of how to use Microsoft Windows Warbird technology☆27Updated 2 years ago
- ☆20Updated 2 years ago
- Reimplementation of the KExecDD DSE bypass technique.☆46Updated 8 months ago
- WinHvShellcodeEmulator (WHSE) is a shellcode emulator leveraging the Windows Hypervisor Platform API☆22Updated 3 years ago
- Research of modifying exported function names at runtime (C/C++, Windows)☆17Updated 11 months ago
- A few examples of how to trap virtual memory access on Windows.☆30Updated 4 months ago
- Former Multi - Ring to Kernel To UserMode Transitional Shellcode For Remote Kernel Exploits☆28Updated 2 years ago
- ☆20Updated 3 months ago
- All LLVM binaries scrambled with SigBreaker and used to test against llvm-lit☆14Updated 3 weeks ago
- PoC exploit for HP Hardware Diagnostic's EtdSupp driver☆50Updated 2 years ago
- A fully compatible replacement of Windows NT NtCreateLowBoxToken syscall - precisely restored from reverse engineering☆35Updated 4 months ago
- Callstack spoofing using a VEH because VEH all the things.☆21Updated last month
- Demo to show how write ALPC Client & Server using native Ntdll.dll syscalls.☆21Updated 3 years ago
- havoc kaine plugin to mitigate PAGE_GUARD protected image headers using JOP gadgets☆27Updated 9 months ago
- ☆21Updated last year
- A years-old exploit of a local EoP vulnerability in Kingsoft Antivirus KWatch Driver version 2009.3.17.77.☆38Updated 3 years ago
- A fast method to intercept syscalls from any user-mode process using InstrumentationCallback and detect any process using Instrumentation…☆28Updated last year