MellowNight / physmem-Scanner

Related projects ⓘ

Alternatives and complementary repositories for physmem-Scanner

• auth12 / sysmap
  x64 manual mapper using inline syscalls
  ☆5Updated 3 years ago
• weak1337 / PresentHookDetection
  ☆76Updated 2 years ago
• Deputation / kernel_payload_comms
  A proof of concept demonstrating communication via mapped shared memory structures between a user-mode process and a kernel-mode payload …
  ☆74Updated 3 years ago
• weak1337 / SystemThreadFinder
  ☆78Updated 3 years ago
• ekknod / sumap
  manually map driver for a signed driver memory space
  ☆138Updated 3 years ago
• UCFoxi / VTableKFunctionHook
  This project will give you an example how you can hook a kernel vtable function that cannot be directly called
  ☆80Updated 2 years ago
• obama-gaming / xor-float
  ☆52Updated 4 years ago
• SamuelTulach / DirectPageManipulation
  A basic demonstration of directly overwriting paging structures for physical memory r/w and interprocess memory copy
  ☆80Updated last year
• fengjixuchui / SharedMemory-By-Frankoo
  Kernel driver that uses Shared memory to communicate with UserMode
  ☆84Updated 5 years ago
• kkent030315 / anymapper
  x64 Windows kernel driver mapper, inject unsigned driver using anycall
  ☆114Updated 9 months ago
• KDIo3 / PCIBan
  A PoC for requesting HWIDs directly from hardware, skipping any potential hooks or OS support.
  ☆77Updated 3 years ago
• 0xf1a / DSMM
  Discarded Section Manual Map
  ☆66Updated 4 years ago
• TheCruZ / CRZKD
  Just my first IOCTL try
  ☆70Updated 4 years ago
• ekknod / MouseClassServiceCallbackTrick
  ☆49Updated 2 years ago
• btbd / wpp
  Intercepting DeviceControl via WPP
  ☆127Updated 5 years ago
• Aki2k / BEDaisy
  reverse engineering of bedaisy.sys (battleyes kernel driver) - Aki2k/BEDaisy
  ☆59Updated 4 years ago
• SamuelTulach / voidmap
  Using CVE-2021-40449 to manual map kernel mode driver
  ☆99Updated 2 years ago
• armvirus / hook-scanner
  Scans all modules in target process for jmp/int3 hooks dissassembles then and follows jmps to destination.
  ☆71Updated last year
• lennyRBLX / manual_exception_handling
  Handling C++ & __try exceptions without the need of built-in handlers.
  ☆65Updated 3 years ago
• ekknod / efi-monitor
  just proof of concept. hooking MmCopyMemory PG safe.
  ☆63Updated last year
• zer0condition / GDRVLib
  Virtual and physical memory hacking library using gigabyte vulnerable driver
  ☆70Updated last year
• Hypercall / FakeEye
  A lightweight BattlEye emulator of the launcher
  ☆57Updated 2 years ago
• Sentient111 / Csgo-Full-kernel
  csgo external running from kernelmode
  ☆102Updated last year
• mathisvickie / KMAC
  Some usefull info when reverse engineering Kernel Mode Anti-Cheat
  ☆67Updated last year
• KANKOSHEV / Detect-KeAttachProcess
  Detect-KeAttachProcess by iterating through all processes as well as checking the context of the thread.
  ☆110Updated 2 years ago