TheMalwareGuardian / Bentico
Windows Kernel Mode Rootkit
☆10Updated 10 months ago
Alternatives and similar repositories for Bentico:
Users that are interested in Bentico are comparing it to the libraries listed below
- ☆12Updated 2 years ago
- havoc kaine plugin to mitigate PAGE_GUARD protected image headers using JOP gadgets☆26Updated 5 months ago
- Listing UDP connections with remote address without sniffing.☆30Updated last year
- A class to emulate the behavior of NtQuerySystemInformation when passed the SystemHypervisorDetailInformation information class☆25Updated last year
- PoC for the Untrusted Pointer Dereference in the appid.sys driver☆15Updated 9 months ago
- Manually perform syscalls without going through any external API or DLL.☆17Updated last year
- ☆29Updated last year
- UEFI Windows Bootkit☆26Updated 7 months ago
- UEFI bootkit: Hardware Implant. In-Progress☆12Updated 2 years ago
- 💻 Windows 10 Kernel-mode rootkit☆31Updated 2 years ago
- Research into removing strings & API call references at compile-time (Anti-Analysis)☆24Updated 7 months ago
- ☆22Updated last year
- Process Injection without R/W target memory and without creating a remote thread☆19Updated 2 years ago
- Windows 10 DLL Injector via Driver utilizing VAD and hiding the loaded driver☆52Updated last year
- doesnt work and wont work on it anymore☆10Updated 6 months ago
- https://github.com/janoglezcampos/c_syscalls with the ASM rewritten by myself for Visual Studio's Compiler.☆29Updated 7 months ago
- ☆25Updated 3 months ago
- Repository of Microsoft Driver Block Lists based off of OS-builds☆39Updated 9 months ago
- This x64dbg plugin allows you to upload your sample to Malcore and view the results.☆33Updated last year
- Antivirus killer using ring-0 kernel driver. Antivirus processes will automatically close while the killer is running.☆6Updated 2 years ago
- HEVD Exploit: ArbitraryWrite on Windows 10 22H2 - Bypassing KVA Shadow and SMEP via PML4 Entry Manipulation☆22Updated 6 months ago
- API Hammering with C++20☆44Updated 2 years ago
- Evilbytecode-Gate resolves Windows System Service Numbers (SSNs) using two methods: analyzing the Guard CF Table in ntdll.dll and parsing…☆16Updated 3 weeks ago
- using the gpu to hide your payload☆53Updated 2 years ago
- An example of how to use Microsoft Windows Warbird technology☆27Updated last year
- An initial proof of concept of a bootkit based on Cr4sh's DMABackdoorBoot☆61Updated last year
- ☆84Updated 7 months ago
- Standalone Metasploit-like XOR encoder for shellcode☆46Updated 8 months ago
- A kernel exploit leveraging NtUserHardErrorControl to elevate a thread to KernelMode and achieve arbitrary kernel R/W & more.☆27Updated 2 years ago
- Research of modifying exported function names at runtime (C/C++, Windows)☆17Updated 8 months ago