A serie of exploits targeting eneio64.sys - Turning Physical Memory R/W into Virtual Memory R/W
☆133Oct 19, 2025Updated last year
Alternatives and similar repositories for Eneio64-Driver-Exploits
Users that are interested in Eneio64-Driver-Exploits are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Implementing an early exception handler for hooking and threadless process injection without relying on VEH or SEH☆140Aug 31, 2025Updated last year
- Shellcode Loader Utilizing ETW Events☆66Feb 26, 2025Updated last year
- Proof of Concepts code for Bring Your Own Vulnerable Driver techniques☆253Aug 21, 2025Updated last year
- kernel callback removal (Bypassing EDR Detections)☆232Jul 2, 2026Updated 4 months ago
- Harness to issue Virtual Secure Mode (VSM) "secure calls" from VTL 0 to VTL 1☆89Sep 8, 2025Updated last year
- End-to-end encrypted email - Proton Mail • AdSpecial offer: 40% Off Yearly / 80% Off First Month. All Proton services are open source and independently audited for security.
- Proof of Concepts code for Bring Your Own Vulnerable Driver techniques☆120Aug 21, 2025Updated last year
- Mirage is a PoC memory evasion technique that relies on a vulnerable VBS enclave to hide shellcode within VTL1.☆115Feb 25, 2025Updated last year
- Anti-Rootkit/Anti-Cheat Driver to uncover unbacked or hidden kernel code.☆364Mar 12, 2026Updated 7 months ago
- Two tools written in C that block network traffic for blacklisted EDR processes, using either Windows Defender Firewall (WDF) or Windows …☆308Sep 23, 2025Updated last year
- Virtual Trust Level (VTL 1) secure call tracing☆107Jul 19, 2026Updated 3 months ago
- Windows 11 24H2-25H2 Runtime PatchGuard Bypass☆276Nov 4, 2025Updated last year
- Windows hypervisor for Intel x64: defensive host hypervisor for Windows designed to mitigate kernel-level attacks including BYOVD, compat…☆280Jul 18, 2026Updated 3 months ago
- Sleep obfuscation☆275Dec 13, 2024Updated last year
- Leaking kernel addresses from ETW consumers. Requires Administrator privileges.☆95Nov 6, 2025Updated 11 months ago
- End-to-end encrypted email - Proton Mail • AdSpecial offer: 40% Off Yearly / 80% Off First Month. All Proton services are open source and independently audited for security.
- Proof-of-concept kernel driver that hijacks the Windows kernel extension table mechanism to preserve process notify callbacks even when a…☆100Jul 7, 2025Updated last year
- Arbitrary Function Call Exploit using the ThrottleStop driver☆11Feb 25, 2026Updated 8 months ago
- A C++ proof of concept demonstrating the exploitation of Windows Protected Process Light (PPL) by leveraging COM-to-.NET redirection and …☆337Mar 6, 2025Updated last year
- KeServiceDescriptorTable retrieval from KiSystemCall64Shadow☆17Dec 10, 2024Updated last year
- DCOM Lateral movement POC abusing the IMsiServer interface - uploads and executes a payload remotely☆397Dec 13, 2024Updated last year
- Alternative Read and Write primitives using Rtl* functions the unintended way.☆79Aug 25, 2025Updated last year
- Hells Hollow Windows 11 Rootkit technique to Hook the SSDT via Alt Syscalls☆294Jul 13, 2026Updated 3 months ago
- ☆18Jan 11, 2026Updated 9 months ago
- Two new offensive techniques using Windows Fibers: PoisonFiber (The first remote enumeration & Fiber injection capability POC tool) Phan…☆316Sep 18, 2024Updated 2 years ago
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- Moonwalk++: Simple POC Combining StackMoonwalking and Memory Encryption☆240Dec 17, 2025Updated 10 months ago
- Translate virtual addresses to physical addresses from usermode.☆147Jun 7, 2024Updated 2 years ago
- Folder Or File Delete to Get System Shell on Current Session Desktop☆49Jan 14, 2025Updated last year
- Process injection alternative☆404Sep 6, 2024Updated 2 years ago
- Dump LSASS via physical memory read primitives in vulnerable kernel drivers☆344Feb 2, 2026Updated 9 months ago
- Call Stack Spoofing for Rust☆223Jan 28, 2026Updated 9 months ago
- A tool that is used to hunt vulnerabilities in x64 WDM drivers☆479Jun 18, 2026Updated 4 months ago
- Experimental Windows x64 Kernel Rootkit with anti-rootkit evasion features.☆615Aug 2, 2025Updated last year
- Windows AppLocker Driver (appid.sys) LPE☆81Jul 29, 2024Updated 2 years ago
- Proton VPN Special Offer - Get 70% off • AdSpecial partner offer. Trusted by over 100 million users worldwide. Tested, Approved and Recommended by Experts.
- Bypass LSA protection using the BYODLL technique☆181Sep 21, 2024Updated 2 years ago
- ROP-based sleep obfuscation to evade memory scanners☆390Jun 22, 2025Updated last year
- PoCs for Kernelmode rootkit techniques research.☆445Mar 25, 2026Updated 7 months ago
- Static analysis & exploitation-triage toolkit for Windows kernel drivers. Discover IOCTLs, Symbolic Links, and check cert , and Downlaods…☆211Apr 27, 2026Updated 6 months ago
- load shellcode without P/D Invoke and VirtualProtect call.☆170Sep 2, 2025Updated last year
- Usermode exploit to bypass any AC using a 0day shatter attack.☆398Nov 26, 2025Updated 11 months ago
- This repo contains EXPs about Vulnerable Windows Driver☆46May 22, 2024Updated 2 years ago