pokevas Goto Github PK

hwid

HWID spoofer

hwid-bench

Generates all possible unique identifiers on windows based operating systems

hwid_spoofer

hyperplatform

Intel VT-x based hypervisor aiming to provide a thin VM-exit filtering platform on Windows.

hyperscan

High-performance regular expression matching library

iat_patcher

Persistent IAT hooking application - based on bearparser

import-handler

A small library to extend the functionality of GetModuleHandle and GetProcAddress to other processes

infinityhook

Hook system calls, context switches, page faults and more.

injdrv

proof-of-concept Windows Driver for injecting DLL into user-mode processes using APC

injection

Windows process injection methods

inline_syscall

Inline syscalls made easy for windows on clang

inlineexecute-assembly

InlineExecute-Assembly is a proof of concept Beacon Object File (BOF) that allows security professionals to perform in process .NET assembly execution as an alternative to Cobalt Strikes traditional fork and run execute-assembly module

invoke-antivm

powershell tool for VM evasion

invoke-sharploader

ioctlpus

IOCTLpus can be used to make DeviceIoControl requests with arbitrary inputs (with functionality somewhat similar to Burp Repeater).

junkdriveopensource

Some garbage drivers written for getting started

k3rn3lm0d3_killer

Process killer from driver

kasperskyhook

Hook system calls on Windows by using Kaspersky's hypervisor

kdmapper

KDMapper is a simple tool that exploits iqvw64e.sys Intel driver to manually map non-signed drivers in memory

kdu

Kernel Driver Utility

kernelgdidraw

The program draws with win32k gdi functions in the kernel while NtGdiDdDDISubmitCommand is being hooked.

kernelhiddenexecute

Execute kernel code with page separation

kernelmode-code

kernelmode-manual-mapping-through-iat

Manual mapping without creating any threads, with rw only access

kiero

Universal graphical hook for a D3D9-D3D12, OpenGL and Vulcan based games.

kinghamlet

Process Ghosting Tool

km-um-communication

A somewhat wide collection of various kernelmode-usermode communication methods in one repository (mainly just for learning purposes).

launcher-abuser

Stealthy way to hijack the existing game process handle within the game launcher (currently supports Steam and Battle.net). Achieve external game process read/write with minimum footprint.

lazy_importer

library for importing functions from dlls in a hidden, reverse engineer unfriendly way

libwfp

C++ library for interacting with the Windows Filtering Platform (WFP)