vxcall / kurLinks
a tiny code that performs kernel-mode read/write using CVE-2023-38817.
☆18Updated 10 months ago
Alternatives and similar repositories for kur
Users that are interested in kur are comparing it to the libraries listed below
Sorting:
- CVE-2022-3699 with arbitrary kernel code execution capability☆71Updated 3 years ago
- using wnbios64.sys for arbitrary r/w☆15Updated 3 months ago
- Minimalistic HTTP(S) client for the NT kernel☆61Updated last month
- Compileable POC of namazso's x64 return address spoofer.☆50Updated 5 years ago
- kernel to user mode APC injector☆46Updated 3 years ago
- PoC exploit for HP Hardware Diagnostic's EtdSupp driver☆51Updated 2 years ago
- silence file system monitoring components by hooking their minifilters☆59Updated 2 years ago
- ☆21Updated 3 years ago
- spoof return address☆79Updated 2 years ago
- Small handy tool for crafting shellcodes by hand.☆18Updated 3 years ago
- Hook all callbacks which are registered with LdrRegisterDllNotification☆96Updated 9 months ago
- Exploit MsIo vulnerable driver☆124Updated 4 years ago
- ntoskrnl .data hooks for UM-KM communication☆53Updated last year
- Dynamically generated obfuscated jumps and/or function calls☆38Updated 2 years ago
- Demonstrate calling a kernel function and handle process creation callback against HVCI☆79Updated 3 years ago
- A serie of exploits targeting eneio64.sys - Turning Physical Memory R/W into Virtual Memory R/W☆111Updated 3 months ago
- NtCreateUserProcess with CsrClientCallServer for mainstream Windows x64 version☆41Updated last year
- A basic implementation of Patch Guard that I implemented, that includes integrity checks and other protection mechanisms I added.☆78Updated 10 months ago
- Scan for potentially vulnerable drivers☆94Updated 3 years ago
- bootkit驱动映射,三环进程注入加载指定模块☆14Updated last year
- Append custom data to signed pe file and DONOT DESTROY SIGNED STATUS.☆26Updated 4 years ago
- Windows API Call Obfuscation☆112Updated 3 years ago
- x86-x64 Packer with Portable Executable compatibility.☆97Updated last month
- Usermode NT Explorer - Query kernel addresses, translate virtual to physical addresses, inspect the PFN database, and more.☆66Updated this week
- Bring Your Own Vulnerable Driver for PatchGuard & Driver Signature Enforcement☆14Updated last year
- IAT-Obfuscation to make static analysis of executable harder.☆45Updated 4 years ago
- ZwProcessHollowing is a x64 process hollowing project which uses direct systemcalls, dll unhooking and RC4 payload decryption☆91Updated 2 years ago
- browse microsoft driver server for potentially vulnerable drivers☆30Updated last year
- Demystifying PatchGuard is a comprehensive analysis of Microsoft's security feature called PatchGuard, which is designed to prevent unaut…☆132Updated 2 years ago
- Fast covert timing channel communication for inter-process and inter-processor communication on Windows systems.☆67Updated 2 months ago