ZwCreateFile / FuckDse
Bring Your Own Vulnerable Driver for PatchGuard & Driver Signature Enforcement
☆11Updated 9 months ago
Alternatives and similar repositories for FuckDse:
Users that are interested in FuckDse are comparing it to the libraries listed below
- Experiment with PAGE_GUARD protection to hide memory from other processes☆43Updated 7 months ago
- clearing traces of a loaded driver☆46Updated 2 years ago
- Kernel Level NMI Callback Blocker☆61Updated 5 months ago
- A library to assist with memory & code protection.☆53Updated 10 months ago
- Using SetWindowHookEx for preinjected DLL's☆57Updated 2 years ago
- ☆50Updated 2 years ago
- This is a POC Test project for INTEL CPUs on blocking NMI Entries through the IDT Handler.☆30Updated 3 months ago
- Driver that communicates using a thread and a shared section with Usermode☆30Updated 4 months ago
- Hardware ID☆29Updated 2 years ago
- The sequel to Voyager☆32Updated 5 months ago
- PoC kernel to usermode injection☆76Updated 11 months ago
- Stealing signatures from pe files☆16Updated 2 years ago
- A simple MmCopyMemory hook.☆36Updated 2 years ago
- A Vulnerable PatchGuard Exploit that can be used to disable PatchGuard on Runtime.☆14Updated 7 months ago
- just proof of concept. hooking MmCopyMemory PG safe.☆65Updated last year
- using wnbios64.sys for arbitrary r/w☆13Updated 8 months ago
- A simple kernel driver for R/W Using kSockets with some bypass implementation overall I wouldn't say its "ud"☆59Updated 5 months ago
- Only for Stress-Testing☆23Updated 2 years ago
- This is an EfiGuard BootLoader that can boot EfiGuard from Usermode with no USB or Setup as a Single Executable with automatic File Dumpi…☆36Updated 4 months ago
- ☆40Updated last year
- Improved VMP Idea(detect anti-anti-debug tools by bug)☆42Updated last year
- ☆45Updated 2 years ago
- A method to Disable DSE using .data ptr hooks☆29Updated 11 months ago
- mouseclassservicecallback detection via hook☆49Updated 2 years ago
- Compileable POC of namazso's x64 return address spoofer.☆51Updated 4 years ago
- ☆71Updated 9 months ago
- An Undetected BE Kernel Driver I developed, Will probably be detected upon releasing this but can be made undetected very easily. Does no…☆64Updated 4 months ago
- Allows for same-file KernelMode function execution using Encrypted addresses of Functions☆28Updated 3 months ago
- A basic demonstration of directly overwriting paging structures for physical memory r/w and interprocess memory copy☆82Updated last year
- ZeroImport is a lightweight and easy to use C++ library for Windows Kernel Drivers. It allows you to hide any import in your kernel drive…☆49Updated last year