Oliver-1-1 / GhostMapperLinks
☆314Updated 3 months ago
Alternatives and similar repositories for GhostMapper
Users that are interested in GhostMapper are comparing it to the libraries listed below
Sorting:
- State of the art DLL injector that took 20 minutes to make☆220Updated 2 years ago
- manual map unsigned driver over signed memory☆200Updated last year
- A mapper that maps shellcode into loaded large page drivers☆292Updated 3 years ago
- Abusing nvidia driver (nvoclock.sys) for physical/virtual memory and control register manipulation.☆273Updated 2 years ago
- Loads a signed kernel driver which allows you to map any driver to kernel mode without any traces of the signed / mapped driver.☆353Updated 4 years ago
- usermode driver mapper that forcefully loads any signed kernel driver (legit cert) with a big enough section (example: .data, .rdata) to …☆444Updated 3 years ago
- Manual mapper that uses PTE manipulation, Virtual Address Descriptor (VAD) manipulation, and forceful memory allocation to hide executabl…☆350Updated 3 years ago
- ☆234Updated 2 months ago
- Hooking Windows' exception dispatcher to protect process's PML4☆191Updated 7 months ago
- Simple Kernelmode DLL Injector with Manual mapping☆305Updated last year
- This tool will allow you to spoof the return addresses of your functions as well as system functions.☆510Updated 2 years ago
- Using CVE-2023-21768 to manual map kernel mode driver☆192Updated 2 years ago
- Achieve arbitrary kernel read/writes/function calling in Hypervisor-Protected Code Integrity (HVCI) protected environments calling withou…☆224Updated 9 months ago
- Windows Kernel inject (no module no thread)☆278Updated 2 years ago
- load unsigned kernel-driver by patching dse in 248 lines☆130Updated last year
- Kernel mode to user mode dll injection☆277Updated 4 years ago
- Windows 10 DLL Injector via Driver utilizing VAD and hiding the loaded driver☆173Updated last year
- Unsigned driver loader using CVE-2018-19320☆297Updated 2 years ago
- Simple proof of concept kernel mode driver hooking tpm.sys dispatch to randomize any public key reads☆219Updated last year
- Code for Battleyes shellcode☆231Updated 3 years ago
- Fumo Loader - All in one kernel-based DLL injector☆322Updated 7 months ago
- x64 Windows kernel code execution via user-mode, arbitrary syscall, vulnerable IOCTLs demonstration☆339Updated 3 years ago
- Recursive and arbitrary code execution at kernel-level without a system thread creation☆158Updated 2 years ago
- A Kernel Driver that can be used for a cheat or malware base to circumvent common cache & structure table checks. PsLoadedModuleList howe…☆145Updated 11 months ago
- Unknowncheats Magically Optimized Tidy Mapper using nvaudio☆133Updated last year
- Load your driver like win32k.sys☆254Updated 3 years ago
- ☆186Updated 3 years ago
- PoC Anti-Rootkit/Anti-Cheat Driver.☆213Updated 3 months ago
- Demo proof of concept for shadow regions, and implementation of HyperDeceit.☆293Updated 2 years ago
- Bypassing PatchGuard on modern x64 systems☆265Updated 2 years ago