RIscRIpt / wdmcppLinks
Visual Studio Project example for using Microsoft's STL in WDM (Windows Kernel-mode Driver)
☆25Updated 3 years ago
Alternatives and similar repositories for wdmcpp
Users that are interested in wdmcpp are comparing it to the libraries listed below
Sorting:
- A library for intel VT-x hypervisor functionality supporting EPT shadowing.☆50Updated 4 years ago
- Windows PDB parser for kernel-mode environment.☆97Updated 2 years ago
- A poc that abuses Enclave☆38Updated 2 years ago
- A basic 100 loc CPU emulator using the existing code of ntoskrnl.exe☆70Updated last year
- Create stealthy, inline, EPT-like hooks using SMAP and SMEP☆37Updated 7 months ago
- detect hypervisor with Nmi Callback☆34Updated 2 years ago
- ☆70Updated 2 years ago
- ☆30Updated 8 months ago
- Kernel ReClassEx☆62Updated last year
- Custom KiSystemStartup, can be used to modificate kernel before boot.☆52Updated 3 years ago
- Intraceptor intercept Windows NT API calls and redirect them to a kernel driver to bypass process/threads handle protections.☆29Updated 3 years ago
- partially disable patchguard up to win11 21H2☆18Updated last year
- Simple and lightweight hypervisor for AMD processors☆33Updated 5 months ago
- unorthodox approach to analyze a trace, but this helped me get comfy with x64 instructions overall (excluding sse/avx/etc lol), cleared u…☆60Updated last year
- A Simple Example☆21Updated 6 years ago
- Cheat for my own game SecureGame which uses a bootkit to hyperjack Hyper-V in order to access VBS enclave's memory☆57Updated 5 months ago
- Handling C++ & __try exceptions without the need of built-in handlers.☆71Updated 3 years ago
- A small tool for rapid enumeration of CPUID, and MSR fields.☆23Updated last year
- x64 Windows implementation of virtual-address to physical-address translation☆42Updated 4 years ago
- Old way for blocking NMI interrupts☆26Updated 2 years ago
- POC Hook of nt!HvcallCodeVa☆52Updated 2 years ago
- A debugger library using VEH.☆55Updated 9 months ago
- Binary DisASseMbler☆23Updated 2 years ago
- Binary rewriter for 64-bit PE files.☆76Updated last year
- x86-64 user mode emulation using Zydis☆46Updated 4 months ago
- windows kernel pagehook☆39Updated 2 years ago
- ☆41Updated 2 years ago
- Intel learning hypervisor and some extend function☆22Updated 5 months ago
- ☆21Updated 4 years ago
- ☆30Updated 2 years ago