EBalloon / Rw-No-Attach

Related projects: ⓘ

• KANKOSHEV / Detect-KeAttachProcess
  Detect-KeAttachProcess by iterating through all processes as well as checking the context of the thread.
  ☆108Updated 2 years ago
• ekknod / acdrv
  base for testing
  ☆146Updated this week
• zer0condition / GDRVLib
  Virtual and physical memory hacking library using gigabyte vulnerable driver
  ☆69Updated last year
• MmMapIoSpace / UCMapper
  Unknowncheats Magically Optimized Tidy Mapper using nvaudio
  ☆91Updated 3 months ago
• weak1337 / SkipHook
  ☆115Updated 2 years ago
• KameronHawk / Kernel-VAD-Injector
  Windows 10 DLL Injector via Driver utilizing VAD and hiding the loaded driver
  ☆140Updated last year
• estimated1337 / lenovo_mapper
  driver manual mapper powered by https://github.com/estimated1337/lenovo_exec
  ☆100Updated last year
• SDXT / MMInject
  Kernel DLL Injector using NX Bit Swapping and VAD hide for hiding injected DLL
  ☆188Updated 3 years ago
• J0xna / Kernel-Overlay-Hider
  ☆130Updated 7 months ago
• Rogue619Z / Manual-Map-Injector
  I've developed a rather effective driver for DLL injection targeting EAC Protected Games, and since I'm not aware of any notable games ut…
  ☆82Updated 4 months ago
• Deputation / hygieia
  Hygieia, a vulnerable driver traces scanner written in C++ as an x64 Windows kernel driver.
  ☆133Updated 2 years ago
• ekknod / sumap
  manually map driver for a signed driver memory space
  ☆136Updated 3 years ago
• fengjixuchui / SharedMemory-By-Frankoo
  Kernel driver that uses Shared memory to communicate with UserMode
  ☆81Updated 5 years ago
• VollRagm / ShellcodeBakery
  A simple tool to assemble shellcode ready to be copy-pasted into code
  ☆63Updated 2 years ago
• armvirus / CosMapper
  Loads a signed kernel driver which allows you to map any driver to kernel mode without any traces of the signed / mapped driver.
  ☆260Updated 3 years ago
• VollRagm / lpmapper
  A mapper that maps shellcode into loaded large page drivers
  ☆215Updated 2 years ago
• wbaby / DoubleCallBack
  ☆131Updated 2 years ago
• oakboat / RTCore64_Vulnerability
  Use RTCore64 to map your driver on windows 11.
  ☆90Updated 5 months ago
• kkent030315 / anymapper
  x64 Windows kernel driver mapper, inject unsigned driver using anycall
  ☆103Updated 7 months ago
• SamuelTulach / voidmap
  Using CVE-2021-40449 to manual map kernel mode driver
  ☆96Updated 2 years ago
• Ahora57 / Roblox-Free-Exploit-Script-Executor-2023-April
  ☆93Updated this week
• Splitx12 / imxyviMapper
  ☆72Updated this week
• Vasie1337 / Kernel-Anticheat
  Check your detection vectors
  ☆132Updated last year
• Sentient111 / KernelDrawing
  Drawing from kernelmode without any hooks
  ☆154Updated 2 years ago
• cutecatsandvirtualmachines / SKLib
  Standard Kernel Library for Windows hacking in C++
  ☆57Updated last month
• crtdll / bedaisy-reversal
  Some psuedo snippets from BattlEye's BEDaisy.sys loaded on Rainbow Six: Siege.
  ☆116Updated 2 years ago
• UCFoxi / VTableKFunctionHook
  This project will give you an example how you can hook a kernel vtable function that cannot be directly called
  ☆78Updated 2 years ago
• Astronaut00 / DoubleDataPointer
  Allows you to communicate with the kernel mode to manipulate memory in a stealthy way to avoid kernel anticheats.
  ☆172Updated 2 years ago
• SamuelTulach / DirectPageManipulation
  A basic demonstration of directly overwriting paging structures for physical memory r/w and interprocess memory copy
  ☆75Updated last year
• 0mWindyBug / GhostMapperUM
  manual map unsigned driver over signed memory
  ☆152Updated 5 months ago