vxcall / kurLinks
a tiny code that performs kernel-mode read/write using CVE-2023-38817.
☆18Updated 6 months ago
Alternatives and similar repositories for kur
Users that are interested in kur are comparing it to the libraries listed below
Sorting:
- using wnbios64.sys for arbitrary r/w☆15Updated last week
- CVE-2022-3699 with arbitrary kernel code execution capability☆70Updated 2 years ago
- X86 Packer with Portable Executable compatibility.☆59Updated last month
- Compileable POC of namazso's x64 return address spoofer.☆50Updated 5 years ago
- PoC exploit for HP Hardware Diagnostic's EtdSupp driver☆50Updated 2 years ago
- Bring Your Own Vulnerable Driver for PatchGuard & Driver Signature Enforcement☆13Updated last year
- Exploits targeting eneio64.sys - Turning Physical Memory R/W into Virtual Memory R/W☆104Updated last month
- silence file system monitoring components by hooking their minifilters☆59Updated last year
- Dynamically generated obfuscated jumps and/or function calls☆38Updated 2 years ago
- ☆21Updated 3 years ago
- spoof return address☆77Updated 2 years ago
- Exploit MsIo vulnerable driver☆114Updated 4 years ago
- ntoskrnl .data hooks for UM-KM communication☆51Updated last year
- Windows API Call Obfuscation☆109Updated 2 years ago
- Small handy tool for crafting shellcodes by hand.☆18Updated 3 years ago
- NtCreateUserProcess with CsrClientCallServer for mainstream Windows x64 version☆32Updated last year
- Demonstrate calling a kernel function and handle process creation callback against HVCI☆75Updated 2 years ago
- An improved version of Patch Guard that I implemented, that includes integrity checks and other protection mechanisms I added.☆72Updated 6 months ago
- Detours implementation (x64/x86) which used only ntdll import☆89Updated last year
- bootkit驱动映射,三环进程注入加载指定模块☆15Updated last year
- Hook all callbacks which are registered with LdrRegisterDllNotification☆90Updated 6 months ago
- Inline syscalls made for MSVC supporting x64 and WOW64☆187Updated 2 years ago
- Reimplement CreateProcessInternalW via Windows 10 20H1+/Windows 11 Base on NtCreateUserProcess-Post☆73Updated last year
- kernel to user mode APC injector☆44Updated 3 years ago
- Finding Truth in the Shadows☆116Updated 2 years ago
- Compile-Time Calls Obfuscator for C++14+☆48Updated last year
- IAT-Obfuscation to make static analysis of executable harder.☆43Updated 4 years ago
- windows rootkit☆61Updated last year
- Detect BypassUAC using AMSI☆26Updated 8 months ago
- Scan for potentially vulnerable drivers☆91Updated 3 years ago