TheMalwareGuardian / AbismoLinks
[ARCHIVED] Early work on Abyss (Windows UEFI Bootkit).
☆41Updated 5 months ago
Alternatives and similar repositories for Abismo
Users that are interested in Abismo are comparing it to the libraries listed below
Sorting:
- simple user-mode Rootkit☆108Updated 3 years ago
- Admin to Kernel code execution using the KSecDD driver☆263Updated last year
- Windows x64 kernel mode rootkit process hollowing POC.☆189Updated 2 years ago
- Demystifying PatchGuard is a comprehensive analysis of Microsoft's security feature called PatchGuard, which is designed to prevent unaut…☆132Updated 2 years ago
- Recursive and arbitrary code execution at kernel-level without a system thread creation☆158Updated 2 years ago
- Exploitable drivers, you know what I mean☆153Updated 2 months ago
- PoC for popping a system shell against the LnvMSRIO.sys driver☆117Updated 3 months ago
- kernel-mode DLL Injector☆125Updated 9 months ago
- SysCaller: SDK for WindowsAPI via syscalls. Dynamic Resolution, Obfuscation, Multi-Language Bindings, & more!☆51Updated 2 months ago
- Windows UEFI Bootkit☆78Updated 2 months ago
- A serie of exploits targeting eneio64.sys - Turning Physical Memory R/W into Virtual Memory R/W☆111Updated 3 months ago
- Dont Call Me Back - Dynamic kernel callback resolver. Scan kernel callbacks in your system in a matter of seconds!☆244Updated last year
- Various Process Injection Techniques☆162Updated 3 years ago
- uefi diskless persistence technique + OVMF secureboot bypass☆95Updated last year
- Walks the CFG bitmap to find previously executable but currently hidden shellcode regions☆130Updated 2 years ago
- Lenovo Diagnostics Driver EoP - Arbitrary R/W☆175Updated 3 years ago
- Implementation of an export address table protection mitigation, like Export Address Filtering (EAF)☆115Updated 2 years ago
- Rewrite and obfuscate code in compiled binaries☆273Updated last month
- Ryūjin Protector - Is a Intel Arch - BIN2BIN - PE Obfuscation/Protection/DRM tool☆287Updated 2 months ago
- Anti-Rootkit/Anti-Cheat Driver to uncover unbacked or hidden kernel code.☆292Updated last month
- Minifilter Callback Patching Proof-of-Concept☆73Updated 3 years ago
- Finding Truth in the Shadows☆120Updated 3 years ago
- Compact MBR Bootkit for Windows☆52Updated 4 years ago
- Using Microsoft Warbird to automatically unpack and execute encrypted shellcode in ClipSp.sys without triggering PatchGuard☆260Updated 3 years ago
- Hells Hollow Windows 11 Rootkit technique to Hook the SSDT via Alt Syscalls☆209Updated 5 months ago
- Code used in this post https://captmeelo.com/redteam/maldev/2022/04/21/kernelcallbacktable-injection.html☆139Updated 3 years ago
- Translate virtual addresses to physical addresses from usermode.☆98Updated last year
- Process Injection using Thread Name☆294Updated 9 months ago
- Uses Threat-Intelligence ETW events to identify shellcode regions being hidden by fluctuating memory protections☆164Updated 2 years ago
- spoof return address☆79Updated 2 years ago