Cr4sh/DrvHide-PoC

This repository has been archived on 14/May/2022
Stars
75
Rank 424,578 (Top 9 %)
Language
C++
Created almost 14 years ago
Updated almost 14 years ago

Cr4sh/DrvHide-PoC

Cr4sh

There are no reviews yet. Be the first to send feedback to the community and the maintainers!

Hidden kernel mode code execution for bypassing modern anti-rootkits.

ThinkPwn

Started as arbitrary System Management Mode code execution exploit for Lenovo ThinkPad model line, ended as exploit for industry-wide 0day vulnerability in machines of many vendors

s6_pcie_microblaze

PCI Express DIY hacking toolkit for Xilinx SP605. This repository is also home of Hyper-V Backdoor and Boot Backdoor, check readme for links and info

SmmBackdoor

First open source and publicly available System Management Mode backdoor for UEFI based platforms. Good as general purpose playground for various SMM experiments.

MicroBackdoor

Small and convenient C2 tool for Windows targets. [ Русский -- значит нахуй! ]

openreil

Open source library that implements translator and tools for REIL (Reverse Engineering Intermediate Language)

WindowsRegistryRootkit

Kernel rootkit, that lives inside the Windows registry values data

KernelForge

A library to develop kernel level Windows payloads for post HVCI era

fwexpl

PC firmware exploitation tool and library

PeiBackdoor

PEI stage backdoor for UEFI compatible firmware

ioctlfuzzer

Automatically exported from code.google.com/p/ioctlfuzzer

UEFI_boot_script_expl

CHIPSEC module that exploits UEFI boot script table vulnerability

IDA-VMware-GDB

Helper script for Windows kernel debugging with IDA Pro on VMware + GDB stub

PTBypass-PoC

Bypassing code hooks detection in modern anti-rootkits via building faked PTE entries.

smram_parse

System Management RAM analysis tool

Code-coverage-analysis-tools

Code coverage analysis tools for the PIN Toolkit

Aptiocalypsis

Arbitrary SMM code execution exploit for industry-wide 0day vulnerability in AMI Aptio based firmwares

MsFontsFuzz

OpenType font file format fuzzer for Windows

secretnet_expl

LPE exploits for Secret Net and Secret Net Studio

qc_debug_monitor

Debug messages monitor for Qualcomm cellular modems

zc_pcie_dma

DMA attacks over PCI Express based on Xilinx Zynq-7000 series SoC

DbgCb

Engine for communication with remote kernel debugger (KD, WinDbg) from drivers and applications

SimpleUnpacker

Simple tool for unpacking packed/protected malware executables.

prl_guest_to_host

Guest to host VM escape exploit for Parallels Desktop

IDA-UbiGraph

IDA Pro plug-in and tools for displaying 3D graphs of procedures using UbiGraph

blog

Stuff for blog.cr4.sh website