Speedi13 / ManualMapped_SEH_32bit
Enable SEH support for manual mapped x86-32bit PEs
☆66Updated 5 years ago
Alternatives and similar repositories for ManualMapped_SEH_32bit:
Users that are interested in ManualMapped_SEH_32bit are comparing it to the libraries listed below
- Intercepting DeviceControl via WPP☆130Updated 5 years ago
- Handling C++ & __try exceptions without the need of built-in handlers.☆69Updated 3 years ago
- Kernel Lazy Importer☆109Updated 10 months ago
- Communication via callback☆73Updated 5 years ago
- a minimalistic windows hypervisor for amd processors☆98Updated 2 years ago
- A basic 100 loc CPU emulator using the existing code of ntoskrnl.exe☆71Updated last year
- An x64 page table iterator written in C++ as a kernel mode windows driver.☆107Updated 3 years ago
- ☆37Updated 7 years ago
- Discarded Section Manual Map☆67Updated 4 years ago
- ☆78Updated 3 years ago
- reverse engineering of bedaisy.sys (battleyes kernel driver) - Aki2k/BEDaisy☆79Updated 4 years ago
- A PoC for requesting HWIDs directly from hardware, skipping any potential hooks or OS support.☆78Updated 3 years ago
- Kernel driver that uses Shared memory to communicate with UserMode☆85Updated 5 years ago
- driver manual mapper☆28Updated 5 years ago
- x64 manual mapper using inline syscalls☆8Updated 3 years ago
- ☆139Updated 4 years ago
- Some psuedo snippets from BattlEye's BEDaisy.sys loaded on Rainbow Six: Siege.☆123Updated 2 years ago
- Some usefull info when reverse engineering Kernel Mode Anti-Cheat☆69Updated 2 years ago
- ☆50Updated 4 years ago
- based on https://github.com/secrary/Hooking-via-InstrumentationCallback☆69Updated 5 years ago
- Detect-KeAttachProcess by iterating through all processes as well as checking the context of the thread.☆109Updated 3 years ago
- External memory library for Windows.☆51Updated 2 years ago
- ☆71Updated 2 years ago
- ☆87Updated last year
- Kernel ReClassEx☆65Updated last year
- Disks for DMA☆100Updated 3 years ago
- Kernel driver for detecting Intel VT-x hypervisors.☆176Updated last year
- Scans all modules in target process for jmp/int3 hooks dissassembles then and follows jmps to destination.☆73Updated last year
- Different aproaches to detecting EPT hooks☆89Updated 2 years ago
- unorthodox approach to analyze a trace, but this helped me get comfy with x64 instructions overall (excluding sse/avx/etc lol), cleared u…☆56Updated last year