nanabingies / CVE-2021-21551
Dell Driver EoP (CVE-2021-21551)
☆26Updated last year
Related projects ⓘ
Alternatives and complementary repositories for CVE-2021-21551
- research revolving the windows filtering platform callout mechanism☆20Updated 5 months ago
- windows kernel pagehook☆37Updated 2 years ago
- An extended proof-of-concept for the CVE-2021-21551 Dell ‘dbutil_2_3.sys’ Kernel Exploit☆23Updated 3 years ago
- direct systemcalls with a modern c++20 interface.☆41Updated last year
- ☆25Updated 3 years ago
- Walks through the 4-level paging structures in Windows x64☆13Updated last year
- ☆15Updated last year
- Windows driver template, using C++20 & cmake & GithubActions☆19Updated 3 months ago
- Bypassing kernel patch protection runtime☆19Updated last year
- WinHvShellcodeEmulator (WHSE) is a shellcode emulator leveraging the Windows Hypervisor Platform API☆19Updated 2 years ago
- Hijack NotifyRoutine for a kernelmode thread☆41Updated 2 years ago
- Load Dll into Kernel space☆38Updated 2 years ago
- ☆29Updated 2 years ago
- ☆26Updated last year
- Helper script for Windows kernel debugging with IDA Pro on native Bochs debugger (including PDB symbols)☆61Updated last year
- Shh0ya Kernel Hook Driver☆18Updated 3 years ago
- A library for intel VT-x hypervisor functionality supporting EPT shadowing.☆48Updated 3 years ago
- A compact tool for detecting AV/EDR hooks in default Windows libraries.☆29Updated 2 years ago
- Walks the Process' VAD list to grab the PTE's corresponding to a usermode virtual address, all to get the physical address☆24Updated 2 years ago
- Demonstrate calling a kernel function and handle process creation callback against HVCI☆48Updated last year
- A driver to implement IOCTL hooking☆23Updated 2 years ago
- ☆22Updated last year
- Sample/PoC Windows kernel driver for detect DMA devices by using Vendor ID and Device ID signatures☆30Updated last month
- A years-old exploit of a local EoP vulnerability in Kingsoft Antivirus KWatch Driver version 2009.3.17.77.☆36Updated 2 years ago
- Wow64 Heaven's Gate Hook☆26Updated 3 years ago
- Detects if a Kernel mode debugger is active by reading the value of KUSER_SHARED_DATA.KdDebuggerEnabled. It is a high level and portable …☆22Updated 7 years ago
- 参考taviso的代码逆向一下mpengine.dll☆19Updated 2 years ago
- Helper script for Windows kernel debugging with IDA Pro on VMware + GDB stub (including PDB symbols)☆60Updated last year