A kernel exploit leveraging NtUserHardErrorControl to elevate a thread to KernelMode and achieve arbitrary kernel R/W & more.
☆60Sep 20, 2022Updated 4 years ago
Alternatives and similar repositories for ANGRYORCHARD
Users that are interested in ANGRYORCHARD are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- A simple C++ driver base with KD data block☆11Jun 25, 2022Updated 4 years ago
- Interprocess communication via a covert timing channel☆25Oct 24, 2025Updated last year
- Finding Truth in the Shadows☆127Jan 26, 2023Updated 3 years ago
- Various novel EPT/NPT hook detection mechanisms.☆27Mar 20, 2026Updated 7 months ago
- C++ Alt syscall hook in 25h2 can be load by KDU☆30Feb 18, 2026Updated 8 months ago
- GPUs on demand by Runpod - Special Offer Available • AdRun AI, ML, and HPC workloads on powerful cloud GPUs—without limits or wasted spend. Deploy GPUs in under a minute and pay by the second.
- Windows kernel driver that detects hypervisors by probing SIDT/LIDT edge cases, paging/TLB behaviors, privilege transitions, and timing e…☆50Mar 3, 2026Updated 8 months ago
- UEFI SMM payload mapper with hot reload for on-hardware development☆30Jul 5, 2026Updated 4 months ago
- ☆18Dec 18, 2020Updated 5 years ago
- Translate virtual addresses to physical addresses from usermode.☆148Jun 7, 2024Updated 2 years ago
- .data ptr swapper for newer win32k versions. (Supports Windows 11)☆38Jan 19, 2026Updated 9 months ago
- Implementation of KlezVirus' silent moonwalk approach for payloads☆18Feb 13, 2026Updated 8 months ago
- Public Release☆16Mar 27, 2019Updated 7 years ago
- a minimalistic windows hypervisor for amd processors☆156Jun 30, 2022Updated 4 years ago
- Hook syscalls from ring0 without triggering PatchGuard☆33Oct 29, 2025Updated last year
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- Demonstrate calling a kernel function and handle process creation callback against HVCI☆87Dec 21, 2022Updated 3 years ago
- Windows User-Mode Shellcode Development Framework (WUMSDF)☆162Jul 15, 2026Updated 3 months ago
- A template programming library for Kernel Mode Windows drivers.☆13Jul 12, 2016Updated 10 years ago
- Fast covert timing channel communication for inter-process and inter-processor communication on Windows systems.☆78Mar 24, 2026Updated 7 months ago
- PoC kernel to usermode injection☆143Feb 26, 2024Updated 2 years ago
- 🔬 Guest execution and tracing using the Windows Hypervisor Platform☆62Mar 14, 2026Updated 7 months ago
- header only library for NtLoadDriver/NtUnloadDriver.☆11Sep 8, 2020Updated 6 years ago
- llvm powered deobfuscation of a vm-based protection☆65Feb 25, 2026Updated 8 months ago
- cr3 shuffle driver☆102Mar 24, 2024Updated 2 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Idiomatic Rust Bindings for Windows Hypervisor Platform☆13Apr 11, 2026Updated 6 months ago
- Windows capability development using GCC and GNU Make☆23Nov 1, 2025Updated last year
- Walks the Process' VAD list to grab the PTE's corresponding to a usermode virtual address, all to get the physical address☆23Nov 22, 2021Updated 4 years ago
- ☆22Aug 28, 2024Updated 2 years ago
- Windows kernel ROP-only implant exposing R/W primitives☆59Feb 1, 2026Updated 9 months ago
- C++ Assembler with Built-in Mutation Engine☆31Sep 6, 2025Updated last year
- ☆10Updated this week
- Local Privilege Escalation Affecting Millions of Gaming Laptops☆62Jan 19, 2026Updated 9 months ago
- A lock-free, high-performance logging system designed for Windows kernel drivers☆26Mar 11, 2025Updated last year
- Simple, predictable pricing with DigitalOcean hosting • AdAlways know what you'll pay with monthly caps and flat pricing. Enterprise-grade infrastructure trusted by 600k+ customers.
- Admin to Kernel code execution using the KSecDD driver☆279Apr 19, 2024Updated 2 years ago
- An advanced library for protecting/obfuscating kernel drivers using the C++ 17 standard.☆52May 7, 2026Updated 6 months ago
- Reversed WintaPix Malware Source code | That targets countries in the Middle East and abuse KeServiceDescriptorTable(SSDT), persistence a…☆22Jul 6, 2024Updated 2 years ago
- Very easy to use pdb parsing library with only one header file，You can use it even if you are a fool.☆13Feb 12, 2026Updated 8 months ago
- Abusing DDMA alongside Copy On Write for Cross Process Code Execution for a 3000$ Bug Bounty☆108Feb 1, 2026Updated 9 months ago
- A PoC to demo modifying cmdline of the child process dynamically. It might be useful against process log tracing, AV or EDR.☆40Dec 31, 2020Updated 5 years ago
- Full reversing of the Microsoft Auxiliary Windows API Library and ported to C☆22Dec 17, 2024Updated last year