btbd / wpp
Intercepting DeviceControl via WPP
☆127Updated 4 years ago
Related projects ⓘ
Alternatives and complementary repositories for wpp
- An x64 page table iterator written in C++ as a kernel mode windows driver.☆102Updated 3 years ago
- Enable SEH support for manual mapped x86-32bit PEs☆65Updated 5 years ago
- Disks for DMA☆98Updated 3 years ago
- ☆139Updated 3 years ago
- Communication via callback☆70Updated 5 years ago
- based on https://github.com/secrary/Hooking-via-InstrumentationCallback☆67Updated 5 years ago
- Kernel Lazy Importer☆109Updated 6 months ago
- Kernel driver that uses Shared memory to communicate with UserMode☆83Updated 5 years ago
- A PoC for requesting HWIDs directly from hardware, skipping any potential hooks or OS support.☆77Updated 3 years ago
- Disable Driver Callbacks☆98Updated 7 years ago
- Some psuedo snippets from BattlEye's BEDaisy.sys loaded on Rainbow Six: Siege.☆122Updated 2 years ago
- scans through physical memory and paging tables in kernel mode☆105Updated 4 years ago
- a more stable & secure read/write virtual memory for kernel mode drivers☆160Updated 4 years ago
- ☆152Updated 5 years ago
- Discarded Section Manual Map☆66Updated 4 years ago
- Kernel driver for detecting Intel VT-x hypervisors.☆170Updated last year
- A basic 100 loc CPU emulator using the existing code of ntoskrnl.exe☆69Updated last year
- a minimalistic windows hypervisor for amd processors☆98Updated 2 years ago
- reverse engineering of bedaisy.sys (battleyes kernel driver) - Aki2k/BEDaisy☆59Updated 4 years ago
- A library to read physical memory and system-wide virtual memory.☆122Updated 6 years ago
- x64 syscall caller in C++.☆84Updated 6 years ago
- ☆93Updated 7 years ago
- A proof of concept demonstrating communication via mapped shared memory structures between a user-mode process and a kernel-mode payload …☆74Updated 3 years ago
- Hygieia, a vulnerable driver traces scanner written in C++ as an x64 Windows kernel driver.☆135Updated 2 years ago
- Detect-KeAttachProcess by iterating through all processes as well as checking the context of the thread.☆110Updated 2 years ago
- Capcom wrapper with safety in mind.☆79Updated 6 years ago
- Manual PE image mapper☆61Updated 11 years ago
- Proof of concept on how to bypass some limitations of a manual mapped driver☆164Updated 4 years ago