Bypasses for Windows kernel callbacks PatchGuard protection
☆44Aug 15, 2021Updated 5 years ago
Alternatives and similar repositories for kernel_callbacks
Users that are interested in kernel_callbacks are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- x64 Windows privilege elevation using anycall☆22May 28, 2021Updated 5 years ago
- Two PoC of accessing process virtual memory via NT Kernel☆21Jun 25, 2021Updated 5 years ago
- A kernel module dumper for Windows x64 using mhyprot vulnerable driver☆38Oct 26, 2020Updated 6 years ago
- x64 Windows PatchGuard bypass, register process-creation callbacks from unsigned code☆206May 27, 2021Updated 5 years ago
- ☆156May 21, 2024Updated 2 years ago
- Proton VPN Special Offer - Get 70% off • AdSpecial partner offer. Trusted by over 100 million users worldwide. Tested, Approved and Recommended by Experts.
- x64 Windows kernel code execution via user-mode, arbitrary syscall, vulnerable IOCTLs demonstration☆427Jul 6, 2022Updated 4 years ago
- Hijack NotifyRoutine for a kernelmode thread☆39Jun 4, 2022Updated 4 years ago
- c++ implementation of windows heavens gate☆69Feb 12, 2021Updated 5 years ago
- As i was busy reversing the githubs^^ i stumbled on old source which allows you to control driver kernal^^ with IOCTL, amazing rite?☆22Jul 15, 2021Updated 5 years ago
- x64 Windows implementation of virtual-address to physical-address translation☆54Jun 3, 2021Updated 5 years ago
- Hook NtDeviceIoControlFile with PatchGuard☆103May 10, 2022Updated 4 years ago
- Simple IOCTL hooking driver for Kernel- User - Mode communication.☆11Jul 26, 2020Updated 6 years ago
- A driver that supports communication between a Windows guest and HyperWin☆15Jan 6, 2021Updated 5 years ago
- Kernel mode to user mode injector☆11Mar 31, 2020Updated 6 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- clearing traces of a loaded driver☆48Jul 2, 2022Updated 4 years ago
- 研究和移除各种内核回调,在anti anti cheat的路上越走越远☆180Aug 26, 2022Updated 4 years ago
- it's a driver injector or driver loader header lib(Windows)☆13Aug 5, 2023Updated 3 years ago
- ☆49Dec 19, 2023Updated 2 years ago
- Communication via callback☆73Oct 9, 2019Updated 7 years ago
- ☆20Oct 14, 2020Updated 6 years ago
- Bypassing EasyAntiCheat.sys self-integrity by abusing call hierarchy☆81Oct 6, 2022Updated 4 years ago
- The windows kernel debugger consists of two parts, KMOD which is the kernel driver handling ring3 request and KCLI, the command line inte…☆100Sep 12, 2022Updated 4 years ago
- Mapping your code on a 0x1000 size page☆70May 20, 2022Updated 4 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Panda - is a set of utilities used to research how PsExec encrypts its traffic.☆13Apr 20, 2021Updated 5 years ago
- ☆10Oct 3, 2016Updated 10 years ago
- core of pkn game hacking project. Including mainly for process management, memory management, and DLL injecttion. Also PE analysis, windo…☆69Mar 2, 2019Updated 7 years ago
- Some garbage drivers written for getting started☆64Dec 31, 2019Updated 6 years ago
- Unsigned Kernel Mode Driver that does memory modifications☆11Oct 13, 2022Updated 4 years ago
- A project on the Unicorn emulator to emulate the code of Pe files in windows☆27Sep 12, 2024Updated 2 years ago
- Analyze PatchGuard☆56Aug 19, 2018Updated 8 years ago
- win10 pgContext dynamic dump (btc version)☆113Jan 15, 2020Updated 6 years ago
- Analysing and defeating PatchGuard universally☆34Nov 4, 2020Updated 5 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Exploit MsIo vulnerable driver☆148Aug 12, 2021Updated 5 years ago
- Kernel DLL Injector using NX Bit Swapping and VAD hide for hiding injected DLL☆221Nov 12, 2020Updated 5 years ago
- An x64 page table iterator written in C++ as a kernel mode windows driver.☆123May 25, 2021Updated 5 years ago
- Some usefull info when reverse engineering Kernel Mode Anti-Cheat☆80Feb 20, 2023Updated 3 years ago
- x64HOOK库☆16Jan 14, 2020Updated 6 years ago
- ☆14Mar 8, 2019Updated 7 years ago
- Tutorial & a blog post that demonstrate how to code a Windows driver to inject a custom DLL into all running processes. I coded it from s…☆142Aug 2, 2021Updated 5 years ago