create a um process that contains all physical memory
☆21Jun 12, 2026Updated 4 months ago
Alternatives and similar repositories for PhysMemEXE
Users that are interested in PhysMemEXE are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Enumerate Callbacks and all Object Types☆17Jan 9, 2023Updated 3 years ago
- Synchronized Kernel Drawing for 24H2☆24Oct 9, 2025Updated last year
- Walks the Process' VAD list to grab the PTE's corresponding to a usermode virtual address, all to get the physical address☆23Nov 22, 2021Updated 4 years ago
- ☆18Feb 5, 2025Updated last year
- ☆18Dec 18, 2020Updated 5 years ago
- Serverless GPU API endpoints on Runpod - Get Bonus Credits • AdSkip the infrastructure headaches. Auto-scaling, pay-as-you-go, no-ops approach lets you focus on innovating your application.
- Simple DLL and client app that work together to hook all the functions in WinHvPlatform.dll in order to provide logging and introspection…☆21Dec 1, 2021Updated 4 years ago
- PTE hook☆36Jun 15, 2024Updated 2 years ago
- it's a driver injector or driver loader header lib(Windows)☆13Aug 5, 2023Updated 3 years ago
- ☆17Jan 9, 2023Updated 3 years ago
- Exploit vulnerabilities in NeacSafe64.sys to achieve privilege escalation and kernel-mode shellcode execution☆78Jul 1, 2025Updated last year
- base for testing☆201Sep 28, 2024Updated 2 years ago
- A basic demonstration of directly overwriting paging structures for physical memory r/w and interprocess memory copy☆106Jun 26, 2023Updated 3 years ago
- An x64 page table iterator written in C++ as a kernel mode windows driver.☆123May 25, 2021Updated 5 years ago
- ☆26Jul 15, 2023Updated 3 years ago
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- ☆21Oct 30, 2025Updated 11 months ago
- Windows X64 mode use seh in manual mapped dll or manual mapped sys☆77Oct 10, 2022Updated 4 years ago
- "Bypassing" HVCI via donor PFN swaps to modify read-only code pages. Call chained kernel functions (kCET and SLAT support), and more.☆148Mar 16, 2026Updated 7 months ago
- Dump PDB Symbols including support for Bochs Debugging Format (with wine support)☆14Aug 11, 2023Updated 3 years ago
- Lightweight WINAPI tracing with Pin☆26Aug 22, 2019Updated 7 years ago
- POC usermode <=> kernel communication via ALPC.☆75Jun 6, 2024Updated 2 years ago
- ☆10Apr 27, 2024Updated 2 years ago
- ☆35Sep 12, 2024Updated 2 years ago
- nmi stackwalking + module verification☆185Dec 28, 2023Updated 2 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- ☆26Oct 18, 2023Updated 3 years ago
- ☆22Aug 28, 2024Updated 2 years ago
- Hook NtDeviceIoControlFile with PatchGuard☆103May 10, 2022Updated 4 years ago
- Automatic vtable detection, inheritance analysis, and function override tracking for reverse engineering compiled C++ binaries. Supports …☆150Mar 13, 2026Updated 7 months ago
- ☆13Nov 24, 2024Updated last year
- My notes about the stub.dll obfuscator.☆55Dec 12, 2025Updated 10 months ago
- User mode C++ tool for detecting UEFI drivers, bootkit malware and modifications by checking the Windows bootloader and managing BCD☆13Sep 6, 2024Updated 2 years ago
- Standard Kernel Library for Windows manipulation in C++☆223Jun 18, 2025Updated last year
- Windows x64 DLL/Driver manual map injection on a non-present PML4E using physical memory read/writes, direct page table manipulation and …☆122Sep 28, 2025Updated last year
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- query-pdb is a server-side software for parsing PDB files. The software provides PDB online parsing service.☆170Mar 30, 2026Updated 6 months ago
- Use ntdll/ntoskrnl to implement Kernel32, Advapi32 and other APIs. It includes user-mode and kernel-mode.☆100Jun 6, 2026Updated 4 months ago
- Windows kernel driver demonstrating kernel-to-usermode communication via shared memory sections☆126Apr 24, 2026Updated 6 months ago
- ☆11Mar 16, 2026Updated 7 months ago
- 从MmPfnData中枚举进程和页目录基址☆230Aug 18, 2023Updated 3 years ago
- Idiomatic Rust Bindings for Windows Hypervisor Platform☆13Apr 11, 2026Updated 6 months ago
- 硬件虚拟化☆65Aug 13, 2025Updated last year