saveme712 / BinConLinks
A library to assist with memory & code protection.
☆65Updated last year
Alternatives and similar repositories for BinCon
Users that are interested in BinCon are comparing it to the libraries listed below
Sorting:
- ☆72Updated 3 years ago
- Experiment with PAGE_GUARD protection to hide memory from other processes☆52Updated last year
- 将驱动映射到会话空间☆37Updated 3 years ago
- A basic demonstration of directly overwriting paging structures for physical memory r/w and interprocess memory copy☆98Updated 2 years ago
- ☆144Updated 3 years ago
- Bypassing EasyAntiCheat.sys self-integrity by abusing call hierarchy☆83Updated 3 years ago
- Kernel Level NMI Callback Blocker☆146Updated 2 months ago
- ☆35Updated last year
- hidden_syscall - syscaller without using syscall instruction in code☆62Updated 2 years ago
- Virtual and physical memory hacking library using gigabyte vulnerable driver☆70Updated 2 years ago
- Windows X64 mode use seh in manual mapped dll or manual mapped sys☆76Updated 3 years ago
- A simple ida python script to find .data ptr☆55Updated 2 years ago
- InfinityHookProMax: Make InfinityHook great great again☆48Updated 2 years ago
- ☆63Updated 3 years ago
- Windows x64 DLL/Driver manual map injection on a non-present PML4E using physical memory read/writes, direct page table manipulation and …☆66Updated 2 months ago
- POC usermode <=> kernel communication via ALPC.☆65Updated last year
- A method to Disable DSE using .data ptr hooks☆36Updated last year
- Discarded Section Manual Map☆68Updated 5 years ago
- Reverse Engineering a signed kernel driver packed and virtualized with VMProtect 3.6☆104Updated 2 years ago
- ☆42Updated 3 years ago
- just proof of concept. hooking MmCopyMemory PG safe.☆77Updated 2 years ago
- clearing traces of a loaded driver☆47Updated 3 years ago
- ☆84Updated last year
- ☆35Updated 3 years ago
- POC Hook of nt!HvcallCodeVa☆52Updated 2 years ago
- PoC kernel to usermode injection☆91Updated last year
- nmi stackwalking + module verification☆150Updated last year
- Unknowncheats Magically Optimized Tidy Mapper using nvaudio☆138Updated last year
- Detect-KeAttachProcess by iterating through all processes as well as checking the context of the thread.☆118Updated 3 years ago
- Only for Stress-Testing☆26Updated 3 years ago