eversinc33 / unKoverLinks
Anti-Rootkit/Anti-Cheat Driver to uncover unbacked or hidden kernel code.
☆267Updated 2 weeks ago
Alternatives and similar repositories for unKover
Users that are interested in unKover are comparing it to the libraries listed below
Sorting:
- Usermode exploit to bypass any AC using a 0day shatter attack.☆210Updated 3 weeks ago
- Recursive and arbitrary code execution at kernel-level without a system thread creation☆157Updated 2 years ago
- Hooking Windows' exception dispatcher to protect process's PML4☆213Updated 11 months ago
- Inline syscalls made for MSVC supporting x64 and WOW64☆190Updated 2 years ago
- Achieve arbitrary kernel read/writes/function calling in Hypervisor-Protected Code Integrity (HVCI) protected environments calling withou…☆240Updated last year
- manual map unsigned driver over signed memory☆208Updated last year
- Demystifying PatchGuard is a comprehensive analysis of Microsoft's security feature called PatchGuard, which is designed to prevent unaut…☆130Updated 2 years ago
- Reverse engineering winapi function loadlibrary.☆229Updated 2 years ago
- Bypassing PatchGuard on modern x64 systems☆265Updated 2 years ago
- An x86-64 code virtualizer for VM based obfuscation☆155Updated last year
- DSE & PG bypass via BYOVD attack☆73Updated 5 months ago
- Ryūjin Protector - Is a Intel Arch - BIN2BIN - PE Obfuscation/Protection/DRM tool☆274Updated last month
- Various Process Injection Techniques☆161Updated 3 years ago
- Rewrite and obfuscate code in compiled binaries☆270Updated last week
- Detects virtual machines and malware analysis environments☆143Updated 3 years ago
- Using Windows' own bootloader as a shim to bypass Secure Boot☆213Updated last year
- State of the art DLL injector that took 20 minutes to make☆223Updated 2 years ago
- C++ macro for x64 programs that breaks ida hex-rays decompiler tool.☆134Updated last year
- Windows 11 24H2-25H2 Runtime PatchGuard Bypass☆230Updated last month
- ☆343Updated 7 months ago
- Obfusk8: lightweight Obfuscation library based on C++17 / Header Only for windows binaries☆395Updated last week
- Load your driver like win32k.sys☆256Updated 3 years ago
- Using Microsoft Warbird to automatically unpack and execute encrypted shellcode in ClipSp.sys without triggering PatchGuard☆257Updated 3 years ago
- DSE bypass using a leaked cert and adjusting the current clock.☆152Updated 2 months ago
- Dont Call Me Back - Dynamic kernel callback resolver. Scan kernel callbacks in your system in a matter of seconds!☆241Updated last year
- spoof return address☆79Updated 2 years ago
- load unsigned kernel-driver by patching dse in 248 lines☆136Updated last year
- compile-time control flow obfuscation using mba☆199Updated 2 years ago
- An x86-64 Code Virtualizer☆293Updated last year
- Process Hollowing in C++ (x86 / x64) - Process PE image replacement☆172Updated 2 years ago