Exploiting HEVD's WriteWhatWhereIoctlDispatch for LPE on Windows 10 TH2 through RS3 using GDI objects.
☆24Jan 23, 2018Updated 8 years ago
Alternatives and similar repositories for Win10GdiExploitation
Users that are interested in Win10GdiExploitation are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- 驱动层拦截web访问源码☆29Apr 2, 2018Updated 8 years ago
- Microsoft Edge Microsoft Edge主页算法☆20Apr 15, 2019Updated 7 years ago
- Bypass for the hardening against usage of tagWnd as a kernel read/write primitive☆32Mar 22, 2017Updated 9 years ago
- hooking KiUserApcDispatcher☆26Apr 3, 2017Updated 9 years ago
- ☆29Sep 18, 2015Updated 11 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Injectable Windows DLL which enforces a W^X memory policy on a process☆15Mar 10, 2017Updated 9 years ago
- Kernel Address Space Layout Randomization (KASLR) Recovery Software☆99Nov 26, 2016Updated 9 years ago
- POC and exploitation of vulnerabilities☆90Mar 22, 2022Updated 4 years ago
- a simple intel vt code both support x86 & x64. PatchGuard monitor.☆76Oct 28, 2021Updated 5 years ago
- Hook IDT vector 0xb2 to detect SCI in 64bit windows.☆35Aug 27, 2022Updated 4 years ago
- Windows system spy for Mouse, Keyboard and Gamepad(Joystick).☆15Jul 6, 2022Updated 4 years ago
- a frame of amd-v svm nest☆58Apr 7, 2020Updated 6 years ago
- Diff tool for comparing export tables in PE images☆24Mar 4, 2020Updated 6 years ago
- This is the first software system, which can detect a stealthy hypervisor and calculate several nested ones even under countermeasures.☆92Sep 22, 2026Updated last month
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- r0akmap is a PoC driver manual mapper based on r0ak☆37Aug 18, 2018Updated 8 years ago
- Different ways to get the HDD Serial☆39Apr 7, 2018Updated 8 years ago
- kernel pool windbg extension☆82Jul 23, 2015Updated 11 years ago
- WinDbg debugger extension library providing various tools to analyse, dump and fix (restore) Microsoft Portable Executable files for both…☆84Aug 24, 2024Updated 2 years ago
- ☆21May 25, 2017Updated 9 years ago
- Driver Loader/BE Bypass/Win Malware(lol)☆35Jun 25, 2019Updated 7 years ago
- ☆19Jul 20, 2015Updated 11 years ago
- HAXM hypervisor client☆18Nov 30, 2018Updated 7 years ago
- A driver that hooks C: volume using symbolic link callback to track all FS access to the volume☆108Apr 24, 2020Updated 6 years ago
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- Tools made for my Hyper-V blog series @ https://foxhex0ne.blogspot.com/☆58Jun 21, 2020Updated 6 years ago
- exploit termdd.sys(support kb4499175)☆61Jul 15, 2019Updated 7 years ago
- Shareds for kernel developement☆28Dec 23, 2013Updated 12 years ago
- Green shellcode challenge tools☆22Apr 9, 2019Updated 7 years ago
- Enumerate all processes and get specified file's handle,then close it.☆12Jul 2, 2018Updated 8 years ago
- This project demonstares an illegal read- and write- access to the kernel-mode data for both allocated by 3rd party drivers and EPROCESS …☆13Mar 6, 2018Updated 8 years ago
- ☆28Jan 15, 2021Updated 5 years ago
- ☆124May 23, 2020Updated 6 years ago
- Driver utilities for building static analysis and other command-line tools.☆24Nov 28, 2022Updated 3 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Demo to show how write ALPC Client & Server using native Ntdll.dll syscalls.☆21Jan 25, 2022Updated 4 years ago
- AllMemPro☆46Jan 15, 2018Updated 8 years ago
- ☆17Mar 3, 2016Updated 10 years ago
- Hyper-V virtual switch packet capturing extension with libpcap / Wireshark format☆13Jun 3, 2014Updated 12 years ago
- Pocs for Antivirus Software‘s Kernel Vulnerabilities☆264Jul 6, 2017Updated 9 years ago
- DC25 5A1F - Demystifying Windows Kernel Exploitation by Abusing GDI Objects☆146Jul 30, 2017Updated 9 years ago
- Automatically exported from code.google.com/p/ioctlbf☆17Mar 28, 2015Updated 11 years ago