Speedi13 / ManualMapped_SEH_32bit
Enable SEH support for manual mapped x86-32bit PEs
☆66Updated 6 years ago
Alternatives and similar repositories for ManualMapped_SEH_32bit:
Users that are interested in ManualMapped_SEH_32bit are comparing it to the libraries listed below
- based on https://github.com/secrary/Hooking-via-InstrumentationCallback☆69Updated 5 years ago
- Intercepting DeviceControl via WPP☆131Updated 5 years ago
- Handling C++ & __try exceptions without the need of built-in handlers.☆69Updated 3 years ago
- An x64 page table iterator written in C++ as a kernel mode windows driver.☆108Updated 3 years ago
- Discarded Section Manual Map☆65Updated 4 years ago
- reverse engineering of bedaisy.sys (battleyes kernel driver) - Aki2k/BEDaisy☆82Updated 4 years ago
- Disks for DMA☆104Updated 3 years ago
- Some usefull info when reverse engineering Kernel Mode Anti-Cheat☆69Updated 2 years ago
- Communication via callback☆73Updated 5 years ago
- ☆50Updated 4 years ago
- A basic 100 loc CPU emulator using the existing code of ntoskrnl.exe☆71Updated last year
- Kernel driver that uses Shared memory to communicate with UserMode☆85Updated 5 years ago
- Detect-KeAttachProcess by iterating through all processes as well as checking the context of the thread.☆111Updated 3 years ago
- ☆37Updated 7 years ago
- a minimalistic windows hypervisor for amd processors☆100Updated 2 years ago
- ☆71Updated 2 years ago
- driver manual mapper☆28Updated 5 years ago
- Kernel ReClassEx☆65Updated last year
- Kernel Lazy Importer☆109Updated 11 months ago
- x64 manual mapper using inline syscalls☆8Updated 3 years ago
- 🪝 Different aproaches to detecting EPT hooks☆102Updated 2 years ago
- Old project (2020) reformed. Modifies gRT->GetVariable sub function from EFI_APPLICATION. Tested on Win10 22H2 (AMD).☆50Updated last year
- ☆42Updated 6 years ago
- ☆78Updated 3 years ago
- Custom KiSystemStartup, can be used to modificate kernel before boot.☆52Updated 2 years ago
- x64 Windows implementation of virtual-address to physical-address translation☆40Updated 3 years ago
- x64 syscall caller in C++.☆87Updated 6 years ago
- Some psuedo snippets from BattlEye's BEDaisy.sys loaded on Rainbow Six: Siege.☆123Updated 2 years ago
- Prototype of hijacking Windows driver dispatch routines in unmapped discardable sections☆55Updated 5 years ago
- nmi stackwalking + module verification☆107Updated last year