ic3qu33n / michelangelo-reanimator
Michelangelo REanimator bootkit and REcon 2023 talk slides/materials
☆28Updated 11 months ago
Alternatives and similar repositories for michelangelo-reanimator:
Users that are interested in michelangelo-reanimator are comparing it to the libraries listed below
- call gates as stable comunication channel for NT x86 and Linux x86_64☆31Updated last year
- A few examples of how to trap virtual memory access on Windows.☆27Updated 2 months ago
- A payload delivery system which embeds payloads in an executable's icon file!☆72Updated last year
- CVE-2024-40431+CVE-2022-25479 chain for EOP(DATA ONLY ATTACK)☆44Updated 4 months ago
- A class to emulate the behavior of NtQuerySystemInformation when passed the SystemHypervisorDetailInformation information class☆26Updated last year
- rpv-web is a browser based frontend for the rpv library☆24Updated 6 months ago
- ☆18Updated last year
- havoc kaine plugin to mitigate PAGE_GUARD protected image headers using JOP gadgets☆26Updated 6 months ago
- GERMY is a Linux Kernel n-day in the N_GSM line discipline☆44Updated 8 months ago
- Evasive ELF Static PIE User-Land-Exec featured in Tmpout Vol 1.☆25Updated 3 years ago
- One Bootloader to Load Them All - Research materials, Code , Etc.☆51Updated 2 years ago
- ☆18Updated last year
- BINARLY Research Tools and PoCs☆35Updated 4 months ago
- yet another hidden LKM hunter☆18Updated last year
- Hackers to Hackers Conference (H2HC) presentation in São Paulo☆34Updated 2 months ago
- really ?☆12Updated 11 months ago
- Linux Sleep Obfuscation☆92Updated last year
- Extract data of TTD trace file to a minidump☆28Updated last year
- ☆25Updated 3 months ago
- ☆29Updated 2 months ago
- Winbindex bot to pull in binaries for specific releases☆45Updated last year
- Proof-of-Concept for CVE-2024-26218☆49Updated 9 months ago
- An injector that use PT_LOAD technique☆12Updated 2 years ago
- An Xdbg Plugin of the ERC Library.☆26Updated last year
- A KISS Rust crate to parse Windows kernel crash-dumps created by Windows & its debugger.☆32Updated 2 weeks ago
- short crackme for Windows XP SP3 (32 bit version). ring0 stuff. IMO very fun x-)☆23Updated last year
- Enabled / Disable LSA Protection via BYOVD☆65Updated 3 years ago
- ☆14Updated 3 years ago
- ☆12Updated 3 years ago
- Former Multi - Ring to Kernel To UserMode Transitional Shellcode For Remote Kernel Exploits☆27Updated 2 years ago