Sinclairq / hierarchy-eacLinks
Bypassing EasyAntiCheat.sys self-integrity by abusing call hierarchy
☆82Updated 2 years ago
Alternatives and similar repositories for hierarchy-eac
Users that are interested in hierarchy-eac are comparing it to the libraries listed below
Sorting:
- Discarded Section Manual Map☆69Updated 5 years ago
- A library to assist with memory & code protection.☆60Updated last year
- ☆42Updated 3 years ago
- ☆74Updated 2 years ago
- Mapping your code on a 0x1000 size page☆72Updated 3 years ago
- A basic demonstration of directly overwriting paging structures for physical memory r/w and interprocess memory copy☆92Updated 2 years ago
- ☆81Updated 3 years ago
- Detect-KeAttachProcess by iterating through all processes as well as checking the context of the thread.☆114Updated 3 years ago
- 将驱动映射到会话空间☆35Updated 2 years ago
- just proof of concept. hooking MmCopyMemory PG safe.☆75Updated last year
- Kernel driver that uses Shared memory to communicate with UserMode☆85Updated 6 years ago
- ☆53Updated 2 years ago
- ☆36Updated 3 years ago
- reverse engineering of bedaisy.sys (battleyes kernel driver) - Aki2k/BEDaisy☆85Updated 4 years ago
- A simple MmCopyMemory hook.☆38Updated 3 years ago
- ☆83Updated last year
- ☆48Updated 3 years ago
- Old project (2020) reformed. Modifies gRT->GetVariable sub function from EFI_APPLICATION. Tested on Win10 22H2 (AMD).☆51Updated last year
- This project will give you an example how you can hook a kernel vtable function that cannot be directly called☆82Updated 3 years ago
- UM-KM Communication using registry callbacks☆40Updated 5 years ago
- Detect removed thread from PspCidTable.☆72Updated 3 years ago
- ☆42Updated 3 years ago
- Some psuedo snippets from BattlEye's BEDaisy.sys loaded on Rainbow Six: Siege.☆124Updated 3 years ago
- ☆80Updated 3 years ago
- ☆50Updated last year
- A PoC for requesting HWIDs directly from hardware, skipping any potential hooks or OS support.☆80Updated 4 years ago
- ☆78Updated last year
- Unknowncheats Magically Optimized Tidy Mapper using nvaudio☆128Updated last year
- Register a callback in Kernel from a manually mapped driver☆41Updated 4 years ago
- ☆32Updated 3 years ago