KDIo3 / PCIBan
A PoC for requesting HWIDs directly from hardware, skipping any potential hooks or OS support.
☆77Updated 3 years ago
Related projects ⓘ
Alternatives and complementary repositories for PCIBan
- Discarded Section Manual Map☆66Updated 4 years ago
- ☆52Updated 4 years ago
- A basic demonstration of directly overwriting paging structures for physical memory r/w and interprocess memory copy☆80Updated last year
- Attempts to decrypt JM Xorstr in some x64 binaries☆50Updated last year
- ☆33Updated 2 years ago
- ☆49Updated 2 years ago
- This tool Decrypt and Extract the files from the EAC☆62Updated last year
- mouseclassservicecallback detection via hook☆48Updated 2 years ago
- A lightweight BattlEye emulator of the launcher☆57Updated 2 years ago
- ☆78Updated 3 years ago
- ☆41Updated 3 years ago
- Virtual and physical memory hacking library using gigabyte vulnerable driver☆70Updated last year
- Handling C++ & __try exceptions without the need of built-in handlers.☆65Updated 3 years ago
- A proof of concept demonstrating communication via mapped shared memory structures between a user-mode process and a kernel-mode payload …☆74Updated 3 years ago
- Mapping your code on a 0x1000 size page☆69Updated 2 years ago
- PointerGuard is a proof-of-concept tool used to create 'guarded' pointers which disguise pointer addresses, monitor reads/writes, and pre…☆49Updated 2 years ago
- x64 manual mapper using inline syscalls☆5Updated 3 years ago
- just proof of concept. hooking MmCopyMemory PG safe.☆63Updated last year
- KDM Is a driver that will dumps every drivers that got manually mapped with kdmapper.☆48Updated 2 years ago
- External memory library for Windows.☆48Updated 2 years ago
- Scans all modules in target process for jmp/int3 hooks dissassembles then and follows jmps to destination.☆71Updated last year
- ☆70Updated 2 years ago
- Kernel driver that uses Shared memory to communicate with UserMode☆84Updated 5 years ago
- scans through physical memory and paging tables in kernel mode☆106Updated 4 years ago
- Kernel Lazy Importer☆111Updated 7 months ago
- A basic 100 loc CPU emulator using the existing code of ntoskrnl.exe☆69Updated last year