zer0condition / checkhv_umLinks
tests to catch some sloppy hv impls
☆28Updated last week
Alternatives and similar repositories for checkhv_um
Users that are interested in checkhv_um are comparing it to the libraries listed below
Sorting:
- A set of LLVM and GCC based plugins that perform code obfuscation.☆136Updated 2 months ago
- Ryūjin Protector - Is a Intel Arch - BIN2BIN - PE Obfuscation/Protection/DRM tool☆275Updated last month
- A serie of exploits targeting eneio64.sys - Turning Physical Memory R/W into Virtual Memory R/W☆105Updated 2 months ago
- Finding Truth in the Shadows☆120Updated 2 years ago
- An improved version of Patch Guard that I implemented, that includes integrity checks and other protection mechanisms I added.☆73Updated 8 months ago
- Hooking KPRCB IdlePreselect function to gain execution inside PID 0.☆73Updated 8 months ago
- Windows 11 kernel research framework demonstrating DSE bypass on Windows 11 25H2 through boot-time execution. Loads unsigned drivers by s…☆58Updated this week
- ☆92Updated 2 weeks ago
- Load dll with undocumented functions and debug symbols☆47Updated last year
- Fast covert timing channel communication for inter-process and inter-processor communication on Windows systems.☆67Updated last month
- kernel-mode DLL Injector☆123Updated 8 months ago
- Demonstrate calling a kernel function and handle process creation callback against HVCI☆79Updated 3 years ago
- Demystifying PatchGuard is a comprehensive analysis of Microsoft's security feature called PatchGuard, which is designed to prevent unaut…☆130Updated 2 years ago
- ntoskrnl .data hooks for UM-KM communication☆51Updated last year
- Create stealthy, inline, EPT-like hooks using SMAP and SMEP☆60Updated last year
- Rewrite and obfuscate code in compiled binaries☆270Updated 2 weeks ago
- Virtual Trust Level (VTL 1) secure call tracing☆83Updated 3 months ago
- A universal binary patching dll.☆113Updated last year
- spoof return address☆79Updated 2 years ago
- PoC exploit for HP Hardware Diagnostic's EtdSupp driver☆50Updated 2 years ago
- ☆93Updated last year
- All LLVM binaries scrambled with SigBreaker and used to test against llvm-lit☆25Updated 7 months ago
- An x86-64 code virtualizer for VM based obfuscation☆157Updated last year
- Minimalistic HTTP(S) client for the NT kernel☆60Updated 3 weeks ago
- Windows 11 24H2-25H2 Runtime PatchGuard Bypass☆230Updated last month
- Proof-of-concept kernel driver that hijacks the Windows kernel extension table mechanism to preserve process notify callbacks even when a…☆92Updated 5 months ago
- C++ macro for x64 programs that breaks ida hex-rays decompiler tool.☆134Updated last year
- windows rootkit☆60Updated last year
- Detours implementation (x64/x86) which used only ntdll import☆90Updated 2 months ago
- WinApi Patcher is a straightforward tool leveraging windows API hooking to patch and modify certain behaviors in a targeted environment.☆42Updated last year