gmh5225 / CallMeWin32kDriver
Load your driver like win32k.sys
☆252Updated 2 years ago
Alternatives and similar repositories for CallMeWin32kDriver:
Users that are interested in CallMeWin32kDriver are comparing it to the libraries listed below
- manual map unsigned driver over signed memory☆185Updated 10 months ago
- A mapper that maps shellcode into loaded large page drivers☆252Updated 2 years ago
- Bypassing PatchGuard on modern x64 systems☆252Updated last year
- ☆197Updated last year
- x64 Windows kernel code execution via user-mode, arbitrary syscall, vulnerable IOCTLs demonstration☆265Updated 2 years ago
- Using CVE-2023-21768 to manual map kernel mode driver☆181Updated last year
- Hygieia, a vulnerable driver traces scanner written in C++ as an x64 Windows kernel driver.☆139Updated 3 years ago
- ☆153Updated 5 years ago
- Kernel DLL Injector using NX Bit Swapping and VAD hide for hiding injected DLL☆207Updated 4 years ago
- This project migrated to https://github.com/backengineering/llvm-msvc☆140Updated last year
- Manual mapper that uses PTE manipulation, Virtual Address Descriptor (VAD) manipulation, and forceful memory allocation to hide executabl…☆307Updated 3 years ago
- ☆177Updated 3 years ago
- Kernel mode to user mode dll injection☆236Updated 3 years ago
- ☆256Updated last month
- Simple Kernelmode DLL Injector with Manual mapping☆252Updated last year
- Windows 10 DLL Injector via Driver utilizing VAD and hiding the loaded driver☆164Updated last year
- State of the art DLL injector that took 20 minutes to make☆209Updated last year
- Abusing nvidia driver (nvoclock.sys) for physical/virtual memory and control register manipulation.☆251Updated last year
- x64 Windows PatchGuard bypass, register process-creation callbacks from unsigned code☆201Updated 3 years ago
- Windows Kernel inject (no module no thread)☆269Updated 2 years ago
- ☆151Updated 9 months ago
- Voyager - A Hyper-V Hacking Framework For Windows 10 x64 (AMD & Intel)☆255Updated last year
- Browse Page Tables on Windows (Page Table Viewer)☆193Updated 2 years ago
- Unknowncheats Magically Optimized Tidy Mapper using nvaudio☆116Updated 8 months ago
- Loads a signed kernel driver which allows you to map any driver to kernel mode without any traces of the signed / mapped driver.☆302Updated 3 years ago
- Kernel LdrLoadDll injector☆258Updated 6 years ago
- r/w virtual memory without attach☆162Updated last year
- Elevate a process to be a protected process☆144Updated 5 years ago
- Kernel driver for detecting Intel VT-x hypervisors.☆176Updated last year
- Detect-KeAttachProcess by iterating through all processes as well as checking the context of the thread.☆109Updated 3 years ago