Deputation / kernel_payload_comms
A proof of concept demonstrating communication via mapped shared memory structures between a user-mode process and a kernel-mode payload on Windows 10 20H2.
☆74Updated 3 years ago
Related projects ⓘ
Alternatives and complementary repositories for kernel_payload_comms
- ☆49Updated 2 years ago
- Virtual and physical memory hacking library using gigabyte vulnerable driver☆70Updated last year
- A basic demonstration of directly overwriting paging structures for physical memory r/w and interprocess memory copy☆80Updated last year
- Kernel driver that uses Shared memory to communicate with UserMode☆84Updated 5 years ago
- just proof of concept. hooking MmCopyMemory PG safe.☆63Updated last year
- ☆48Updated last year
- ☆41Updated 3 years ago
- bypass to the p2c(s) that I have run over the past few months.☆53Updated last year
- Calling "own" MouseClassServiceCallback☆60Updated 2 years ago
- x64 manual mapper using inline syscalls☆5Updated 3 years ago
- A lightweight BattlEye emulator of the launcher☆57Updated 2 years ago
- ☆78Updated 3 years ago
- Mapping your code on a 0x1000 size page☆69Updated 2 years ago
- page table manipulation to gain physical r/w☆38Updated 6 months ago
- ☆76Updated 2 years ago
- i stole this from some guys private repo on github☆54Updated 3 years ago
- I've developed a rather effective driver for DLL injection targeting EAC Protected Games, and since I'm not aware of any notable games ut…☆84Updated 7 months ago
- Discarded Section Manual Map☆66Updated 4 years ago
- ☆33Updated 2 years ago
- Old project (2020) reformed. Modifies gRT->GetVariable sub function from EFI_APPLICATION. Tested on Win10 22H2 (AMD).☆45Updated 8 months ago
- KDM Is a driver that will dumps every drivers that got manually mapped with kdmapper.☆48Updated 2 years ago
- This project will give you an example how you can hook a kernel vtable function that cannot be directly called☆80Updated 2 years ago
- Handling C++ & __try exceptions without the need of built-in handlers.☆65Updated 3 years ago
- A Kernel Driver that can be used for a cheat or malware base to circumvent common cache & structure table checks. PsLoadedModuleList howe…☆75Updated 2 months ago
- manually map driver for a signed driver memory space☆138Updated 3 years ago
- Some usefull info when reverse engineering Kernel Mode Anti-Cheat☆67Updated last year
- ☆50Updated 11 months ago
- ☆64Updated 2 years ago