Custom KiSystemStartup, can be used to modificate kernel before boot.
☆52Apr 7, 2022Updated 4 years ago
Alternatives and similar repositories for KiSystemStartupMeme
Users that are interested in KiSystemStartupMeme are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- An example code of CiGetCertPublisherName☆15Mar 24, 2022Updated 4 years ago
- Disable threat tracing from the kernel..☆14Apr 8, 2022Updated 4 years ago
- Intel learning hypervisor and some extend function☆21Aug 23, 2025Updated 11 months ago
- Experiment to use sections as User/Kernelmode comm vector☆22Apr 7, 2023Updated 3 years ago
- Using SetWindowHookEx for preinjected DLL's☆58Aug 25, 2022Updated 3 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- base for testing☆194Sep 28, 2024Updated last year
- Bypassing EasyAntiCheat.sys self-integrity by abusing call hierarchy☆81Oct 6, 2022Updated 3 years ago
- PointerGuard is a proof-of-concept tool used to create 'guarded' pointers which disguise pointer addresses, monitor reads/writes, and pre…☆58May 23, 2022Updated 4 years ago
- Walks through the 4-level paging structures in Windows x64☆14Feb 12, 2023Updated 3 years ago
- Recursive and arbitrary code execution at kernel-level without a system thread creation☆159Mar 16, 2026Updated 4 months ago
- Simple Demo of using Windows Hypervisor Platform☆29Jul 14, 2025Updated last year
- collection of code snippets,windbg,python scripts and resources☆12Jul 11, 2022Updated 4 years ago
- mash hypervisor host pml4☆16Jun 22, 2022Updated 4 years ago
- ☆39Mar 23, 2023Updated 3 years ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- A poc that abuses Enclave☆40Sep 8, 2022Updated 3 years ago
- manually map driver for a signed driver memory space☆179Mar 11, 2021Updated 5 years ago
- Simulate SendInput with ClassService☆36Sep 5, 2018Updated 7 years ago
- Calling "own" MouseClassServiceCallback☆75Jul 28, 2022Updated 4 years ago
- A PoC for requesting HWIDs directly from hardware, skipping any potential hooks or OS support.☆89Mar 16, 2021Updated 5 years ago
- Simple DLL and client app that work together to hook all the functions in WinHvPlatform.dll in order to provide logging and introspection…☆21Dec 1, 2021Updated 4 years ago
- 09/2021 reversal of EasyAntiCheat driver☆244Dec 21, 2021Updated 4 years ago
- Kernel DLL Injector using NX Bit Swapping and VAD hide for hiding injected DLL☆220Nov 12, 2020Updated 5 years ago
- Old way for blocking NMI interrupts☆28Sep 6, 2022Updated 3 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Mapping your code on a 0x1000 size page☆70May 20, 2022Updated 4 years ago
- ☆17Oct 31, 2022Updated 3 years ago
- A simple x86_64 AMD-v hypervisor type-2 Programmed with C++, with soon to be added syscall hooks. [W.I.P]☆111Aug 3, 2023Updated 3 years ago
- Process hiding library☆19Feb 23, 2020Updated 6 years ago
- ☆18Mar 28, 2023Updated 3 years ago
- Detour library (x64 and x86 compatible)☆15Dec 15, 2020Updated 5 years ago
- ☆68Aug 31, 2021Updated 4 years ago
- ☆50Feb 21, 2022Updated 4 years ago
- A research project about Windows notify routines.☆38Jul 31, 2020Updated 6 years ago
- End-to-end encrypted email - Proton Mail • AdSpecial offer: 40% Off Yearly / 80% Off First Month. All Proton services are open source and independently audited for security.
- ☆19May 17, 2022Updated 4 years ago
- Hijack NotifyRoutine for a kernelmode thread☆38Jun 4, 2022Updated 4 years ago
- Detect-KeAttachProcess by iterating through all processes as well as checking the context of the thread.☆117Feb 8, 2022Updated 4 years ago
- Visual Studio template for GNU-EFI☆16May 16, 2022Updated 4 years ago
- Walks the Process' VAD list to grab the PTE's corresponding to a usermode virtual address, all to get the physical address☆23Nov 22, 2021Updated 4 years ago
- Helper functions for calculating the authenticode digest for a portable executable file☆20Apr 30, 2020Updated 6 years ago
- Using Microsoft Warbird to automatically unpack and execute encrypted shellcode in ClipSp.sys without triggering PatchGuard☆269Aug 31, 2022Updated 3 years ago