w1u0u1 / kinject
Kernel shellcode injector
☆143Updated 4 years ago
Alternatives and similar repositories for kinject:
Users that are interested in kinject are comparing it to the libraries listed below
- Scan for potentially vulnerable drivers☆86Updated 3 years ago
- PoC capable of detecting manual syscalls from usermode.☆193Updated 4 months ago
- x64 Windows PatchGuard bypass, register process-creation callbacks from unsigned code☆202Updated 3 years ago
- Code Injection, Inject malicious payload via pagetables pml4.☆234Updated 3 years ago
- A tool for detecting manual/direct syscalls in x86 and x64 processes using Nirvana Hooks.☆110Updated 3 years ago
- Some source code to demonstrate avoiding certain direct syscall detections by locating and JMPing to a legitimate syscall instruction wit…☆213Updated 2 years ago
- NINA: No Injection, No Allocation x64 Process Injection Technique☆202Updated 4 years ago
- CVE-2022-3699 with arbitrary kernel code execution capability☆70Updated 2 years ago
- Windows API Call Obfuscation☆102Updated 2 years ago
- Kernel DLL Injector using NX Bit Swapping and VAD hide for hiding injected DLL☆212Updated 4 years ago
- PoC: Rebuild A New Path Back to the Heaven's Gate (HITB 2021)☆103Updated 3 years ago
- Lenovo Diagnostics Driver EoP - Arbitrary R/W☆172Updated 2 years ago
- Bypassing PatchGuard on modern x64 systems☆257Updated 2 years ago
- Kernel LdrLoadDll injector☆259Updated 6 years ago
- Convert PE files to a shellcode☆75Updated 4 years ago
- DSE bypass using a leaked cert and adjusting the current clock.☆149Updated 2 years ago
- 让Etwhook再次伟大! Make InfinityHook Great Again!☆134Updated 3 years ago
- Hygieia, a vulnerable driver traces scanner written in C++ as an x64 Windows kernel driver.☆143Updated 3 years ago
- Inline syscalls made for MSVC supporting x64 and WOW64☆178Updated last year
- Load your driver like win32k.sys☆251Updated 2 years ago
- Hook NtDeviceIoControlFile with PatchGuard☆105Updated 2 years ago
- An example of how x64 kernel shellcode can dynamically find and use APIs☆104Updated 4 years ago
- PoC: Exploit 32-bit Thread Snapshot of WOW64 to Take Over $RIP & Inject & Bypass Antivirus HIPS (HITB 2021)☆161Updated 3 years ago
- Windows PE - TLS (Thread Local Storage) Injector in C/C++☆104Updated 4 years ago
- Using CVE-2023-21768 to manual map kernel mode driver☆182Updated 2 years ago
- Recursive and arbitrary code execution at kernel-level without a system thread creation☆154Updated 2 years ago
- 研究和移除各种内核回调,在anti anti cheat的路上越走越远☆173Updated 2 years ago
- 滥用cow机制进行全局注入☆97Updated 4 years ago
- NO WriteProcessMemory CreateRemoteThread APIs call shellcode injection☆28Updated 5 years ago
- Exploit MsIo vulnerable driver☆97Updated 3 years ago