This driver hooks a device object for ioctl and uses mdls to allocate physical pages and manually injects an entry into a process's page table.
☆16Feb 14, 2023Updated 3 years ago
Alternatives and similar repositories for Illicit-memory-allocation
Users that are interested in Illicit-memory-allocation are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- ☆15Feb 5, 2021Updated 5 years ago
- A simple C++ driver base with KD data block☆11Jun 25, 2022Updated 4 years ago
- A driver to implement IOCTL hooking☆29Mar 17, 2022Updated 4 years ago
- A repository filled with ideas to break/detect direct syscall techniques☆25Apr 21, 2022Updated 4 years ago
- Function hooks in Windows NT Kernel☆26Oct 13, 2020Updated 6 years ago
- Proton VPN Special Offer - Get 70% off • AdSpecial partner offer. Trusted by over 100 million users worldwide. Tested, Approved and Recommended by Experts.
- Windows Kernel Misc☆25Sep 3, 2023Updated 3 years ago
- ☆10May 1, 2022Updated 4 years ago
- ☆28May 17, 2022Updated 4 years ago
- ☆16Apr 18, 2023Updated 3 years ago
- POC about how to prevent windbg break☆15Oct 3, 2022Updated 4 years ago
- AIDA64DRIVER Elevation of Privilege Vulnerability☆17Oct 25, 2024Updated 2 years ago
- IO隐藏通信封装☆17May 31, 2021Updated 5 years ago
- The undocumented tagWND struct☆14Jul 25, 2023Updated 3 years ago
- Persistence techniques for windows.☆19Jun 26, 2023Updated 3 years ago
- Open source password manager - Proton Pass • AdSecurely store, share, and autofill your credentials with Proton Pass, the end-to-end encrypted password manager trusted by millions.
- Unsigned Kernel Mode Driver that does memory modifications☆11Oct 13, 2022Updated 4 years ago
- Rendering on external windows via hijacking thread contexts, with notes on ValidateHwnd☆14Jul 9, 2020Updated 6 years ago
- A method to Disable DSE using .data ptr hooks☆37Feb 1, 2024Updated 2 years ago
- Walks the Process' VAD list to grab the PTE's corresponding to a usermode virtual address, all to get the physical address☆23Nov 22, 2021Updated 4 years ago
- Find your offsets the cool way, :)☆11Jan 24, 2024Updated 2 years ago
- A series of methods used to detect kernel shellcode for tencent game safe race 2024☆47Apr 22, 2024Updated 2 years ago
- ☆13Nov 24, 2024Updated last year
- ☆15Jun 20, 2022Updated 4 years ago
- Experiment to use sections as User/Kernelmode comm vector☆22Apr 7, 2023Updated 3 years ago
- Open source password manager - Proton Pass • AdSecurely store, share, and autofill your credentials with Proton Pass, the end-to-end encrypted password manager trusted by millions.
- ☆132Sep 24, 2023Updated 3 years ago
- ☆14Jul 20, 2023Updated 3 years ago
- ☆191May 20, 2022Updated 4 years ago
- Not mine, just saved☆13Nov 12, 2023Updated 2 years ago
- ☆10Apr 27, 2024Updated 2 years ago
- ☆12Oct 24, 2022Updated 4 years ago
- Hooking library using Valve's GameOverlayRenderer☆16Aug 19, 2022Updated 4 years ago
- Overwatch 2 Tool which shows Players through walls.☆13Feb 9, 2024Updated 2 years ago
- Windows NT port of 'Main is usually a function. So then when is it not?'☆28Mar 11, 2024Updated 2 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Freeze is a payload toolkit for bypassing EDRs using suspended processes, direct syscalls, and alternative execution methods☆13Sep 30, 2022Updated 4 years ago
- .NET Framework 4.0 based Driver Loader for NoirVisor☆14Jan 12, 2021Updated 5 years ago
- Simulate SendInput with ClassService☆37Sep 5, 2018Updated 8 years ago
- POC Memory hack for the single player game Hogwarts Legacy☆14Feb 26, 2023Updated 3 years ago
- Archive R/W into any protected process by changing the value of KTHREAD->PreviousMode☆162Jul 31, 2022Updated 4 years ago
- Dangling COM Keys Finder☆17Nov 16, 2021Updated 4 years ago
- GeSWall, Intrusion Prevention System for Windows☆23Jan 18, 2026Updated 9 months ago
Are these results useful?