mrexodia / EfiCMake
CMake template for a basic EFI application/bootkit. This library is header-only, there is no EDK2 runtime!).
☆76Updated 2 years ago
Alternatives and similar repositories for EfiCMake:
Users that are interested in EfiCMake are comparing it to the libraries listed below
- Windows PDB parser for kernel-mode environment.☆94Updated 2 years ago
- x64 PE-COFF virtualization driven obfuscation engine☆55Updated 2 years ago
- A basic 100 loc CPU emulator using the existing code of ntoskrnl.exe☆71Updated last year
- x86-64 user mode emulation using Zydis☆44Updated last month
- Windows kernel driver template for cmkr (with testsigning).☆30Updated last year
- unorthodox approach to analyze a trace, but this helped me get comfy with x64 instructions overall (excluding sse/avx/etc lol), cleared u…☆56Updated last year
- Me fockin' pe protector☆44Updated 2 years ago
- Collection of obfuscation, tamper-proofing, and watermarking algorithms targeting LLVM IR.☆71Updated 5 years ago
- Lightweight PDB symbol parser and resolver☆24Updated 3 months ago
- How Meltdown and Spectre haunt Anti-Cheat: DVRT details☆21Updated 6 months ago
- Binary rewriter for 64-bit PE files.☆68Updated last year
- x64 Windows implementation of virtual-address to physical-address translation☆40Updated 3 years ago
- Create stealthy, inline, EPT-like hooks using SMAP and SMEP☆36Updated 4 months ago
- Cheat for my own game SecureGame which uses a bootkit to hyperjack Hyper-V in order to access VBS enclave's memory☆37Updated 2 months ago
- Debug Print viewer (user and kernel)☆65Updated last year
- just proof of concept. hooking MmCopyMemory PG safe.☆64Updated last year
- A simple x86_64 AMD-v hypervisor type-2 Programmed with C++, with soon to be added syscall hooks. [W.I.P]☆93Updated last year
- Unicorn Engine port for UEFI firmware☆46Updated 2 months ago
- Visual Studio Project example for using Microsoft's STL in WDM (Windows Kernel-mode Driver)☆25Updated 3 years ago
- Kernel ReClassEx☆65Updated last year
- A portable header only library extending the C++20 STL.☆73Updated 10 months ago
- ☆30Updated 3 years ago
- devirtualization vmprotect☆62Updated last year
- ☆27Updated last year
- kernel driver used to monitor the activity of BadlionAnticheat.sys by patching its IAT☆33Updated 3 years ago
- A c++20 constexpr x86 assembler☆56Updated 3 years ago
- A library for intel VT-x hypervisor functionality supporting EPT shadowing.☆48Updated 3 years ago
- Helper script for Windows kernel debugging with IDA Pro on VMware + GDB stub (including PDB symbols)☆63Updated last year
- intel vt-x type 2 hypervisor☆49Updated 7 months ago
- vdk is a set of utilities used to help with exploitation of a vulnerable driver.☆39Updated 2 years ago