Popular repositories Loading

1. anycall anycall Public

   x64 Windows kernel code execution via user-mode, arbitrary syscall, vulnerable IOCTLs demonstration

   C++ 374 70

2. evil-mhyprot-cli evil-mhyprot-cli Public

   A PoC for Mhyprot2.sys vulnerable driver that allowing read/write memory in kernel/user via unprivileged user process.

   C++ 337 69

3. PageTableInjection PageTableInjection Public

   Code Injection, Inject malicious payload via pagetables pml4.

   C++ 242 61

4. NoPatchGuardCallback NoPatchGuardCallback Public archive

   x64 Windows PatchGuard bypass, register process-creation callbacks from unsigned code

   C 208 35

5. anymapper anymapper Public

   x64 Windows kernel driver mapper, inject unsigned driver using anycall

   C++ 184 38

6. CVE-2022-42046 CVE-2022-42046 Public

   CVE-2022-42046 Proof of Concept of wfshbr64.sys local privilege escalation via DKOM

   C++ 162 26