gmh5225 Goto Github PK

driver-remove-callback-cheekyblinder

Enumerating and removing kernel callbacks using signed vulnerable drivers

driver-rootkit-spectre

A Windows kernel-mode rootkit that abuses legitimate communication channels to control a machine.

driver-rtlwalkframechain-psimagenotifyroutinespamfilter

PsImageNotifyRoutine Spam Filter

driver-rust-minifilter-rs

An example of Windows minifilter in C++/Rust

driver-rust-rootkit-eagle-rs

Rusty Rootkit: Windows Kernel Driver in Rust for Red Teamers

driver-rust-wfp

Windows Filtering Platform driver in Rust

driver-scan-hygieia

Hygieia, a vulnerable driver traces scanner written in C++ as an x64 Windows kernel driver.

driver-seh-sehcall

Windows X64 mode use seh in manual mapped dll or manual mapped sys

driver-sessionmapper

将驱动映射到会话空间

driver-sinmapper

usermode driver mapper that forcefully loads any signed kernel driver (legit cert) with a big enough section (example: .data, .rdata) to map your driver over. the main focus of this project is to prevent modern anti-cheats (BattlEye, EAC) from finding your driver and having the power to hook anything due to being inside of legit memory (signed legit driver).

driver-smm

alternative smm driver for ryzen motherboards

driver-smmbackdoor

First open source and publicly available System Management Mode backdoor for UEFI based platforms. Good as general purpose playground for various SMM experiments.

driver-stl-crtsys

C/C++ Runtime library for system file (Windows Kernel Driver)

driver-stl-ktl

Kernel Template Library: STL-style containers and tools for Windows kernel space programming

driver-stl-stlkrn

C++ STL in the Windows Kernel with C++ Exception Support

driver-stl-wdmcpp

Visual Studio Project example for using Microsoft's STL in WDM (Windows Kernel-mode Driver)

driver-stl-xstar

The library for windows developers. (MSVC, С++17, WDK 10)

driver-submission

A GitHub Action to automate driver submission

driver-symlinkcallback

A driver that hooks C: volume using symbolic link callback to track all FS access to the volume

driver-tcp-transportanalyzer

Simple Windows Filtering Platform kernel-mode driver designed to analyze incoming and outgoing TCP packets.

driver-theperfectinjector

Literally, the perfect injector.

driver-threadspy

driver-tinyusb

An open source cross-platform USB stack for embedded system

driver-token-tokenswitcher

Switches the token field in the eprocess structure

driver-tool-ark-kernelv

Rootkit & Anti-rootkit

driver-tool-irp-cfb

Canadian Furious Beaver is a tool for monitoring IRP handler in Windows drivers, and facilitating the process of analyzing, replaying and fuzzing Windows drivers for vulnerabilities

driver-tool-ksdumper

Dumping processes using the power of kernel space !

driver-tool-ptview

Browse Page Tables on Windows

driver-transparent-encryption-tendedriver

Windows 10 kernel file transparent encryption and decryption driver

driver-triggerbot-directinput

Simulate SendInput with ClassService