Language
Sort by: Recently starred
Starred repositories
This x64dbg plugin sets the page protection for memory mapped views in scenarios which cause NtProtectVirtualMemory to fail.
Rusty Hypervisor - Windows Kernel Blue Pill Type-2 Hypervisor in Rust (Codename: Matrix)
Rusty Hypervisor - Windows UEFI Blue Pill Type-1 Hypervisor in Rust (Codename: Illusion)
An advanced in-memory evasion technique fluctuating shellcode's memory protection between RW/NoAccess & RX and then encrypting/decrypting its contents
Shows an example of how to implement VT-d/AMD-Vi on Windows
Windows 10 CDPSvc DLL Hijacking - From LOCAL SERVICE to SYSTEM
Abusing impersonation privileges through the "Printer Bug"
Keyauth Loader + Kernel Injector
A PoC of Themida 3.xx Cyclic Redundancy Check Bypass
Simple DLL that spoofs EasyAntiCheat on most games
KDP compatible unsigned driver loader leveraging a write primitive in one of the IOCTLs of gdrv.sys
manual map unsigned driver over signed memory
Alternative Shellcode Execution Via Callbacks
C++ 17 or higher control flow obfuscation library for windows binaries
Obfusheader.h is a portable header file for C++14 compile-time obfuscation.
This is a simple project of a driver + usermode.
An imgui window rendered on top of nvidia's overlay with animations
ManifestAutoUpdate
Set of plugins and library for dynamic pdb generation and synchronisation
Manual map shellcode (aka byte array) injector