kkent030315 / evil-mhyprot-cliLinks
A PoC for Mhyprot2.sys vulnerable driver that allowing read/write memory in kernel/user via unprivileged user process.
☆335Updated 3 years ago
Alternatives and similar repositories for evil-mhyprot-cli
Users that are interested in evil-mhyprot-cli are comparing it to the libraries listed below
Sorting:
- A static library, wrapper for mhyprot vulnerable driver, execute exploits and tests☆130Updated 4 years ago
- A lib that allows using mhyprot2 driver for enum process modules, r/w process memory and kill process.☆349Updated 4 years ago
- Kernel driver loader using vulnerable gigabyte driver (https://www.secureauth.com/labs/advisories/gigabyte-drivers-elevation-privilege-vu…☆244Updated 3 years ago
- A PoC for vulnerable driver "mhyprot" that allows us to read/write memory in kernel/user from usermode.☆161Updated 4 years ago
- DLL that hooks the NtQuerySystemInformation API and hides a process name☆288Updated 2 years ago
- A collection of various vulnerable (mostly physical memory exposing) drivers.☆390Updated 2 years ago
- x64 Windows kernel code execution via user-mode, arbitrary syscall, vulnerable IOCTLs demonstration☆322Updated 2 years ago
- Controlling Windows PP(L)s☆329Updated last year
- Unsigned driver loader using CVE-2018-19320☆273Updated 2 years ago
- A x64 Windows Rootkit using SSDT or Hypervisor hook☆537Updated 5 months ago
- Bypassing PatchGuard on modern x64 systems☆260Updated 2 years ago
- Simple Kernelmode DLL Injector with Manual mapping☆291Updated last year
- Signtool for expired certificates☆477Updated last year
- ☆409Updated 5 months ago
- Load your driver like win32k.sys☆254Updated 2 years ago
- A revival of the classic and legendary KsDumper☆475Updated 4 months ago
- Debugger Anti-Detection Benchmark☆333Updated last year
- An Injector that can inject dll into game process protected by anti cheat using SetWindowsHookEx.☆244Updated 6 years ago
- Efi Driver Access is a simply project to load a driver during system boot with the idea to give the user kernel access for read/write mem…☆421Updated 2 years ago
- DSE bypass using a leaked cert and adjusting the current clock.☆153Updated 2 years ago
- A simple commandline injector using classic DLL injection☆151Updated 2 years ago
- This tool will allow you to spoof the return addresses of your functions as well as system functions.☆486Updated 2 years ago
- Handle elevation DKOM against ObRegisterCallbacks☆301Updated 6 years ago
- Emulate Drivers in RING3 with self context mapping or unicorn☆338Updated 2 years ago
- Demo proof of concept for shadow regions, and implementation of HyperDeceit.☆279Updated 2 years ago
- Bootkit for Windows Sandbox to disable DSE/PatchGuard.☆280Updated 7 months ago
- x64 Dynamic Reverse Engineering Toolkit☆659Updated 2 years ago
- Fumo Loader - All in one kernel-based DLL injector☆299Updated 5 months ago
- Native code virtualizer for x64 binaries☆485Updated 5 months ago
- Titan is a VMProtect devirtualizer☆36Updated last year