lllzed Goto Github PK

aethervisor

Memory hacking library powered by AMD SVM

blacklotus

BlackLotus UEFI Windows Bootkit

build-virtualbox-in-windows

It automatically builds VirtualBox in Windows.

cosmapper

Loads a signed kernel driver which allows you to map any driver to kernel mode without any traces of the signed / mapped driver.

devicemon

VT-based PCI device monitor (SPI)

direct-ntcreateuserprocess

Call NtCreateUserProcess directly as normal.

dmaprotect

Shows an example of how to implement VT-d/AMD-Vi on Windows

dwm-screen-shot

将shellcode注入dwm.exe以进行屏幕截取

dwm_overlay

PoC: DX11 overlay over DWM

dwmhook

noob hooking dwm for overlay

dxgkrnl_hook

C++ graphics kernel subsystem hook

easy-hwid-spoofer

基于内核模式的硬件信息欺骗工具

edk2

enum_real_dirbase

从MmPfnData中枚举进程和页目录基址

haxm

Intel® Hardware Accelerated Execution Manager (Intel® HAXM)

helloamdhvpkg

HelloAmdHvPkg is a type-1 research hypervisor for AMD processors.

hidden

Windows driver with usermode interface which can hide processes, file-system and registry objects, protect processes and etc

hook-kdtrap

hv

Lightweight Intel VT-x Hypervisor.

hyperhide

Hypervisor based anti anti debug plugin for x64dbg

hyperwin

A native hypervisor designed for the Windows operating system

idthook

IDT HOOK KiPageFault test Modified from： github.com/kanren3/x64-IDT-HOOK

infinityhookpro

InfinityHookPro Win7 -> Win11 latest

kdu

Kernel Driver Utility

kernel-anit-anit-debug-plugins

Kernel Anit Anit Debug Plugins 内核反反调试插件

kernel-gdi

GDI Render in kernelmode

kernel_window_hide

内核级别隐藏指定窗口

kerneldwm

Kernel dwm render

kernelgdidraw

The program draws with win32k gdi functions in the kernel while NtGdiDdDDISubmitCommand is being hooked.

krnl-gdi-render