SamuelTulach / GetDeviceInterfacesMemoryLeak

Related projects: ⓘ

• crvvdev / intraceptor
  Intraceptor intercept Windows NT API calls and redirect them to a kernel driver to bypass process/threads handle protections.
  ☆27Updated 2 years ago
• h4xu3lyn / FuckPg
  Analysing and defeating PatchGuard universally
  ☆34Updated 3 years ago
• kkent030315 / EvilHooker
  Function hooks in Windows NT Kernel
  ☆21Updated 3 years ago
• Gbps / CapcomLib
  A reflexive driver loader to bypass Windows DSE (featuring a custom PE loader)
  ☆37Updated 6 years ago
• KiFilterFiberContext / BadlionLogger
  kernel driver used to monitor the activity of BadlionAnticheat.sys by patching its IAT
  ☆32Updated 3 years ago
• daaximus / peeko
  ☆23Updated this week
• kkent030315 / ProcessVmAccess
  Two PoC of accessing process virtual memory via NT Kernel
  ☆24Updated 3 years ago
• m-odern / focus-theme-for-ida-pro-7.6
  ☆30Updated 2 years ago
• Broihon / Symbol-Parser
  Small class to parse debug info from PEs, download their respective PDBs from the Microsoft Public Symbol Server and calculate RVAs of fu…
  ☆39Updated last year
• HoShiMin / Arch
  A bunch of architectural headers for i386 and AMD64
  ☆31Updated 11 months ago
• r1cky33 / winforms-gui-loader
  driver interface with dll-injection capabilities
  ☆28Updated 3 years ago
• mq1n / SonicInjector
  Dll injector POC for new handle stealing technique
  ☆20Updated 6 years ago
• JackBro / BetaShield
  BetaShield Windows x86 Ring3 Anticheat v2
  ☆34Updated 7 years ago
• SamuelTulach / EvilKaspersky
  ☆19Updated 7 months ago
• EngineOwningSoftware / CSkyDBK
  Use the Cheat Engine driver in your own process!
  ☆22Updated 6 years ago
• adrianyy / memorylib
  Remote memory library in C++17.
  ☆30Updated 6 years ago
• HyperSine / siren-hypervisor
  ☆36Updated last year
• Broihon / ProcessInfo
  A class to gather information about a process, its threads and modules.
  ☆23Updated 4 years ago
• NtKernelMC / MemoryGuard
  Memory Guard Library
  ☆9Updated 3 years ago
• Lima-X / Win32.Nebula
  A packed & protected Module Loader and more, for 64-bit Windows
  ☆28Updated 3 years ago
• MellowNight / IOCTL-hook
  realExtern.sys driver
  ☆65Updated 3 years ago
• namazso / SaferIO
  A slightly safer io access library
  ☆12Updated 2 years ago
• kkent030315 / anyvtop
  x64 Windows implementation of virtual-address to physical-address translation
  ☆39Updated 3 years ago
• ekknod / efi-monitor
  just proof of concept. hooking MmCopyMemory PG safe.
  ☆60Updated 10 months ago
• r1cky33 / krnlmap
  simply manual map any system image
  ☆16Updated 3 years ago
• Rat431 / ColdKernel_KUSER
  A simple kernel mode driver that hooks some values at the KUSER_SHARED_DATA structure.
  ☆25Updated 4 years ago
• Hypercall / COVM
  A lightweight x86/x64 VM
  ☆18Updated 3 years ago
• rbapat / KernelInjector
  Stealthy Injector that leverages a vulnerable driver and other exploits to remain undetected
  ☆36Updated 5 years ago
• SamuelTulach / vmcheck
  ☆18Updated 3 years ago
• layerfsd / phantasm-x86-virtualizer
  Code virtualizer
  ☆20Updated 8 years ago