Cr4sh / pico_dmaLinks
Autonomous pre-boot DMA attack hardware implant for M.2 slot based on PicoEVB development board
☆94Updated 2 years ago
Alternatives and similar repositories for pico_dma
Users that are interested in pico_dma are comparing it to the libraries listed below
Sorting:
- SMM UEFI module and client for UMD privilege escalation☆60Updated 5 months ago
- Windows kernel debugger for Linux hosts running Windows under KVM/QEMU☆99Updated 5 months ago
- SMM rootkit similar to LoJax or MosaicRegressor☆140Updated 2 years ago
- uefi diskless persistence technique + OVMF secureboot bypass☆94Updated last year
- bypassing intel txt's tboot integrity checks via coreboot shim☆82Updated 8 months ago
- Abusing exceptions for code execution.☆113Updated 2 years ago
- The sample DXE runtime driver demonstrating how to program DMA remapping.☆68Updated last year
- SMM driver/rootkit for platform memory access with R3 <-> R0 <-> R-2 communication.☆105Updated last year
- A Windows PE packer for executables (x64) with LZMA compression and with full TLS (Thread Local Storage) support.☆90Updated 3 weeks ago
- Another UEFI runtime bootkit☆32Updated 2 years ago
- alternative smm driver for ryzen motherboards☆175Updated last year
- HyperDbg's logic analyzer and chip-level hardware debugger☆53Updated last year
- Sample/PoC Windows kernel driver for detect DMA devices by using Vendor ID and Device ID signatures☆35Updated last year
- BYOVD: Loading dbk64.sys and grabbing a handle to it☆160Updated 3 years ago
- Demystifying PatchGuard is a comprehensive analysis of Microsoft's security feature called PatchGuard, which is designed to prevent unaut…☆129Updated 2 years ago
- Example of using Windows Platform Binary Table (WPBT)☆26Updated 2 years ago
- Proof-of-concept game using VBS enclaves to protect itself from cheating☆45Updated last year
- Generate a PDB file given the old PDB file and an address mapping☆49Updated 3 months ago
- EFI bootkit for loading unsigned drivers☆20Updated last year
- A simple hypervisor demonstrating the use of the Intel VT-rp (redirect protection) technology.☆109Updated last year
- Tool to dump UEFI runtime drivers implementing runtime services for Windows☆108Updated 4 years ago
- Exploit POC for CVE-2024-36877☆47Updated last year
- Compact MBR Bootkit for Windows☆54Updated 3 years ago
- Using Microsoft Warbird to automatically unpack and execute encrypted shellcode in ClipSp.sys without triggering PatchGuard☆255Updated 3 years ago
- Using MMIO (Memory-Mapped I/O) to read TPM 2.0 public Endorsement Key.☆49Updated last year
- The Windbg extensions to study Hyper-V on Intel and AMD processors.☆167Updated 2 months ago
- CMake template for a basic EFI application/bootkit. This library is header-only, there is no EDK2 runtime!).☆78Updated 3 years ago
- Win64 UEFI Driver-based tool for unrestricted memory R/W☆29Updated 3 years ago
- Yet another IDA Pro/Home plugin for deobfuscating stack strings☆104Updated last month
- IDA Taskr is a pure Python library for IDA Pro related parallel computing. It lets you use the power of Qt (built-in to IDA!) and Python'…☆26Updated this week