zer0condition / checkhv_umLinks
tests to catch some sloppy hv impls
☆32Updated last month
Alternatives and similar repositories for checkhv_um
Users that are interested in checkhv_um are comparing it to the libraries listed below
Sorting:
- A set of LLVM and GCC based plugins that perform code obfuscation.☆138Updated 3 months ago
- A serie of exploits targeting eneio64.sys - Turning Physical Memory R/W into Virtual Memory R/W☆116Updated 3 months ago
- Ryūjin Protector - Is a Intel Arch - BIN2BIN - PE Obfuscation/Protection/DRM tool☆300Updated 2 months ago
- Minimalistic HTTP(S) client for the NT kernel☆61Updated 2 months ago
- Fast covert timing channel communication for inter-process and inter-processor communication on Windows systems.☆67Updated 2 months ago
- Finding Truth in the Shadows☆120Updated 3 years ago
- Load dll with undocumented functions and debug symbols☆47Updated last year
- ☆113Updated last month
- A basic implementation of Patch Guard that I implemented, that includes integrity checks and other protection mechanisms I added.☆78Updated 10 months ago
- Virtual Trust Level (VTL 1) secure call tracing☆86Updated 5 months ago
- kernel-mode DLL Injector☆125Updated 9 months ago
- WinApi Patcher is a straightforward tool leveraging windows API hooking to patch and modify certain behaviors in a targeted environment.☆43Updated last year
- Usermode NT Explorer - Query kernel addresses, translate virtual to physical addresses, inspect the PFN database, and more.☆68Updated 2 weeks ago
- Hooking KPRCB IdlePreselect function to gain execution inside PID 0.☆73Updated 9 months ago
- Windows 11 24H2-25H2 Runtime PatchGuard Bypass☆244Updated 3 months ago
- WinDbg plugin to trace module transitions from a debugged driver.☆40Updated last month
- Windows 11 kernel research framework demonstrating DSE bypass on Windows 11 25H2 through boot-time execution. Loads unsigned drivers by s…☆75Updated last month
- x86-64 virtualizing obfuscator written in Rust☆78Updated 2 years ago
- Demystifying PatchGuard is a comprehensive analysis of Microsoft's security feature called PatchGuard, which is designed to prevent unaut…☆133Updated 2 years ago
- ☆42Updated 11 months ago
- Detours implementation (x64/x86) which used only ntdll import☆90Updated 3 months ago
- ☆118Updated 3 years ago
- Create stealthy, inline, EPT-like hooks using SMAP and SMEP☆60Updated last year
- vm_str.hpp is a header only string obfuscator.☆103Updated 5 months ago
- Exploiting the KsecDD Windows driver through Server Silos☆74Updated last year
- Walks the CFG bitmap to find previously executable but currently hidden shellcode regions☆130Updated 2 years ago
- spoof return address☆79Updated 2 years ago
- C++ macro for x64 programs that breaks ida hex-rays decompiler tool.☆137Updated last year
- ntoskrnl .data hooks for UM-KM communication☆53Updated last year
- ☆93Updated last year