crtdll / bedaisy-reversalLinks
Some psuedo snippets from BattlEye's BEDaisy.sys loaded on Rainbow Six: Siege.
☆126Updated 3 years ago
Alternatives and similar repositories for bedaisy-reversal
Users that are interested in bedaisy-reversal are comparing it to the libraries listed below
Sorting:
- Detect-KeAttachProcess by iterating through all processes as well as checking the context of the thread.☆117Updated 3 years ago
- Kernel driver that uses Shared memory to communicate with UserMode☆89Updated 6 years ago
- ☆145Updated last year
- Kernel Lazy Importer☆124Updated last year
- A very simple C++ library for download pdb, get rva of function, global variable and offset from struct.☆151Updated last year
- ☆139Updated 2 years ago
- Example driver on how to use SKLib☆59Updated 11 months ago
- ☆68Updated 4 years ago
- reverse engineering of bedaisy.sys (battleyes kernel driver) - Aki2k/BEDaisy☆97Updated 5 years ago
- ☆59Updated 3 years ago
- DWM Overlay without write .text☆99Updated last year
- A PoC for requesting HWIDs directly from hardware, skipping any potential hooks or OS support.☆81Updated 4 years ago
- ☆59Updated 3 years ago
- ☆106Updated last year
- Static user/kernel mode library that allows access to all functions and global variables by extracting offsets from the PDB☆108Updated 4 months ago
- Bypassing EasyAntiCheat.sys self-integrity by abusing call hierarchy☆81Updated 3 years ago
- Shows an example of how to implement VT-d/AMD-Vi on Windows☆148Updated 2 years ago
- This project will give you an example how you can hook a kernel vtable function that cannot be directly called☆83Updated 3 years ago
- A basic demonstration of directly overwriting paging structures for physical memory r/w and interprocess memory copy☆97Updated 2 years ago
- ☆51Updated 5 years ago
- ☆169Updated 3 years ago
- BattlEye kernel module bypass☆173Updated 3 years ago
- Drawing from kernelmode without any hooks☆172Updated 3 years ago
- ☆98Updated 3 years ago
- Old project (2020) reformed. Modifies gRT->GetVariable sub function from EFI_APPLICATION. Tested on Win10 22H2 (AMD).☆53Updated last year
- An x64 page table iterator written in C++ as a kernel mode windows driver.☆114Updated 4 years ago
- Windows X64 mode use seh in manual mapped dll or manual mapped sys☆74Updated 3 years ago
- Discarded Section Manual Map☆68Updated 5 years ago
- Using CVE-2021-40449 to manual map kernel mode driver☆102Updated 3 years ago
- Kernel-based memory hacking framework communicating with a kernel driver via sockets.☆94Updated 4 years ago