xsh3llsh0ck / DeadwingLinks
SMM driver/rootkit for platform memory access with R3 <-> R0 <-> R-2 communication.
☆115Updated last year
Alternatives and similar repositories for Deadwing
Users that are interested in Deadwing are comparing it to the libraries listed below
Sorting:
- DSE & PG bypass via BYOVD attack☆77Updated 6 months ago
- Yet another IDA Pro/Home plugin for deobfuscating stack strings☆117Updated 3 weeks ago
- Kernel driver for detecting Intel VT-x hypervisors.☆192Updated 2 years ago
- Hooking Windows' exception dispatcher to protect process's PML4☆223Updated last year
- Demystifying PatchGuard is a comprehensive analysis of Microsoft's security feature called PatchGuard, which is designed to prevent unaut…☆132Updated 2 years ago
- Binary rewriter for 64-bit PE files.☆99Updated last year
- Using MMIO (Memory-Mapped I/O) to read TPM 2.0 public Endorsement Key.☆52Updated last year
- Tool to dump EFI runtime drivers.☆39Updated last year
- A Hyper-V Hacking Framework For Windows 10 x64 (AMD & Intel)☆134Updated 2 years ago
- Kernel Level NMI Callback Blocker☆154Updated 4 months ago
- nmi stackwalking + module verification☆155Updated 2 years ago
- Create stealthy, inline, EPT-like hooks using SMAP and SMEP☆60Updated last year
- An x86-64 code virtualizer for VM based obfuscation☆168Updated last year
- ntoskrnl .data hooks for UM-KM communication☆53Updated last year
- A x86_64 software emulator☆161Updated 5 months ago
- Experiment with PAGE_GUARD protection to hide memory from other processes☆54Updated last year
- Hijacking Hyper-V at Runtime with DDMA☆76Updated 5 months ago
- Cheat for my own game SecureGame which uses a bootkit to hyperjack Hyper-V in order to access VBS enclave's memory☆97Updated last year
- Detects virtual machines and malware analysis environments☆145Updated 3 years ago
- Another UEFI runtime bootkit☆35Updated 2 years ago
- Windows PDB parser for kernel-mode environment.☆103Updated 7 months ago
- Using Windows' own bootloader as a shim to bypass Secure Boot☆214Updated last year
- a minimalistic windows hypervisor for amd processors☆136Updated 3 years ago
- Windows 11 24H2-25H2 Runtime PatchGuard Bypass☆242Updated 2 months ago
- intel vt-x type 2 hypervisor☆60Updated 9 months ago
- manual map unsigned driver over signed memory☆214Updated last year
- Kernel ReClassEx☆66Updated 2 years ago
- Load dll with undocumented functions and debug symbols☆47Updated last year
- 🪝 Various EPT hook detection approaches☆142Updated 6 months ago
- C++ macro for x64 programs that breaks ida hex-rays decompiler tool.☆137Updated last year