Empyreal96 / W10M_unedited-decomp

Related projects ⓘ

Alternatives and complementary repositories for W10M_unedited-decomp

• ExpLife0011 / KeUserModeCallBack
  A Simple Example
  ☆20Updated 5 years ago
• Air14 / SymbolicAccess
  Static user/kernel mode library that allows access to all functions and global variables by extracting offsets from the PDB
  ☆73Updated last year
• SHA-MRIZ / DisplayMiniportHooking
  ☆46Updated 3 years ago
• mackiiN / KernelHackBase
  ☆43Updated 3 years ago
• HoShiMin / Arch
  A bunch of architectural headers for i386 and AMD64
  ☆35Updated last year
• lennyRBLX / manual_exception_handling
  Handling C++ & __try exceptions without the need of built-in handlers.
  ☆65Updated 3 years ago
• ekknod / KiSystemStartupMeme
  Custom KiSystemStartup, can be used to modificate kernel before boot.
  ☆49Updated 2 years ago
• samshine / VoyagerWithEPT
  ☆26Updated 2 years ago
• ekknod / efi-monitor
  just proof of concept. hooking MmCopyMemory PG safe.
  ☆63Updated last year
• 1401199262 / NMIStackWalk
  ☆70Updated 2 years ago
• gmh5225 / DSE-Patcher
  https://www.codeproject.com/Articles/5348168/Disable-Driver-Signature-Enforcement-with-DSE-Patc
  ☆15Updated last year
• helloobaby / Nmi-Callback
  detect hypervisor with Nmi Callback
  ☆34Updated 2 years ago
• RIscRIpt / wdmcpp
  Visual Studio Project example for using Microsoft's STL in WDM (Windows Kernel-mode Driver)
  ☆23Updated 3 years ago
• ItzPAX / supermode
  page table manipulation to gain physical r/w
  ☆38Updated 6 months ago
• Aki2k / BEDaisy
  reverse engineering of bedaisy.sys (battleyes kernel driver) - Aki2k/BEDaisy
  ☆59Updated 4 years ago
• alexcub89 / BEClient2
  ☆33Updated 4 years ago
• Sinclairq / tp-emulator
  A basic 100 loc CPU emulator using the existing code of ntoskrnl.exe
  ☆69Updated last year
• LLLZed / IDTHOOK
  IDT HOOK KiPageFault test Modified from： github.com/kanren3/x64-IDT-HOOK
  ☆15Updated 4 years ago
• gmh5225 / FakeEnclave
  A poc that abuses Enclave
  ☆36Updated 2 years ago
• crvvdev / intraceptor
  Intraceptor intercept Windows NT API calls and redirect them to a kernel driver to bypass process/threads handle protections.
  ☆27Updated 2 years ago
• MatrixKung / ntoskrnl
  Windows Kernel nt files - To research windows kernel
  ☆15Updated 4 years ago
• gmh5225 / kcpplib
  The driver STL library used by myself
  ☆12Updated 2 years ago
• johnsonjason / KeProcessOverlay
  Reading/writing memory from kernel-mode
  ☆21Updated 7 years ago
• Darkratos / Spoofed-Call
  A wrapper class to hide the original calling address of a function
  ☆55Updated 4 years ago
• 0mdi / edgegdi_hook
  ☆14Updated 3 years ago
• SmoLL-iCe / VExDebugger
  A debugger library using VEH.
  ☆41Updated 2 months ago