weak1337 / PresentHookDetectionLinks
☆80Updated 3 years ago
Alternatives and similar repositories for PresentHookDetection
Users that are interested in PresentHookDetection are comparing it to the libraries listed below
Sorting:
- Virtual and physical memory hacking library using gigabyte vulnerable driver☆72Updated 2 years ago
- A basic demonstration of directly overwriting paging structures for physical memory r/w and interprocess memory copy☆98Updated 2 years ago
- ☆80Updated 4 years ago
- ☆48Updated 3 years ago
- driver manual mapper powered by https://github.com/estimated1337/lenovo_exec☆113Updated 2 years ago
- Detect-KeAttachProcess by iterating through all processes as well as checking the context of the thread.☆118Updated 3 years ago
- I've developed a rather effective driver for DLL injection targeting EAC Protected Games, and since I'm not aware of any notable games ut…☆96Updated last year
- ☆55Updated 2 years ago
- ☆52Updated last year
- ☆69Updated 3 years ago
- UM-KM Communication using registry callbacks☆40Updated 5 years ago
- Based on physmeme☆71Updated 3 years ago
- ☆78Updated last year
- This project will give you an example how you can hook a kernel vtable function that cannot be directly called☆83Updated 3 years ago
- Kernel driver that uses Shared memory to communicate with UserMode☆90Updated 6 years ago
- Old project (2020) reformed. Modifies gRT->GetVariable sub function from EFI_APPLICATION. Tested on Win10 22H2 (AMD).☆53Updated last year
- Discarded Section Manual Map☆69Updated 5 years ago
- A simple tool to assemble shellcode ready to be copy-pasted into code☆69Updated 3 years ago
- Mapping your code on a 0x1000 size page☆72Updated 3 years ago
- i stole this from some guys private repo on github☆57Updated 4 years ago
- Reverse Engineering a signed kernel driver packed and virtualized with VMProtect 3.6☆106Updated 2 years ago
- ☆155Updated last year
- bypass to the p2c(s) that I have run over the past few months.☆52Updated 2 years ago
- A simple MmCopyMemory hook.☆37Updated 3 years ago
- Archive R/W into any protected process by changing the value of KTHREAD->PreviousMode☆159Updated 3 years ago
- ☆42Updated 3 years ago
- ☆42Updated 3 years ago
- page table manipulation to gain physical r/w☆44Updated last year
- Using CVE-2021-40449 to manual map kernel mode driver☆101Updated 3 years ago
- ☆36Updated 3 years ago