• Stars
    star
    304
  • Rank 137,274 (Top 3 %)
  • Language
    C
  • Created over 4 years ago
  • Updated almost 3 years ago

Reviews

There are no reviews yet. Be the first to send feedback to the community and the maintainers!

Repository Details

Lua in kernel-mode because why not.

NtLua

Do you have a burning desire to run coroutines in kernel?

Do you hate the fact that Microsoft does not consider Admin-Kernel boundary real when they do not feel like paying security researchers and yet refuse to give you Ring-0 access?

Did your parents explicitly tell you to stay away from kernel?

Do you get a smile on your face when you imagine device driver developers seeing this and crying over how stupid it is for hours (although half of the hardware manufacturers ship drivers with arbitrary physical memory read/write somehow)?

Well you've come to the right place to run a scripting language at DPC_LEVEL!

How to use

  1. Build everything using the solution file.
  2. Create the NtLua service via sc create NtLua binpath= <Path-to-driver> type= kernel
  3. Start the NtLua service sc start NtLua
  4. Run the console and enjoy!

Horrible samples for horrible people

Supports:

  • Structured exception handling
  • Garbage collected temporaries
  • UNICODE_STRING/ANSI_STRING via unicode_string(str) and ansi_string(str)
  • Automatic importing of entire kernel images

Under development:

  • File importing via UM console
  • Symbol parsing for internal functions and structure declarations
  • Lua to C callback wrapping
  • Multi-thread support
  • HIGH_LEVEL IRQL support
  • Other fun stuff you are considering to contribute.

If you have any useful scripts, feel free to send a PR to include it in the Repo under /scripts!

More Repositories

1

NoVmp

A static devirtualizer for VMProtect x64 3.x. powered by VTIL.
C++
1,911
star
2

ThePerfectInjector

Literally, the perfect injector.
C
836
star
3

ByePg

Defeating Patchguard universally for Windows 8, Windows 8.1 and all versions of Windows 10 regardless of HVCI.
C++
822
star
4

NtRays

Hex-Rays microcode plugin for automated simplification of Windows Kernel decompilation.
C++
502
star
5

CVE-2018-8897

Arbitrary code execution with kernel privileges using CVE-2018-8897.
C++
408
star
6

haruspex

Exploration of x86-64 ISA using speculative execution.
C++
303
star
7

linux-pe

COFF and Portable Executable format described using standard C++ with no dependencies.
C++
250
star
8

simple_cnn

Simple Convolutional Neural Network Library
C++
181
star
9

HexSuite

Header only wrapper around Hex-Rays API in C++20.
C++
147
star
10

physical_mem_controller

A library to read physical memory and system-wide virtual memory.
C++
118
star
11

vmware-rpc

Header-only VMWare Backdoor API Implementation & Effortless VMX Patcher for Custom Guest-to-Host RPCs
C++
96
star
12

IdaThemer

🎨 Seamlessly convert your favorite Visual Studio Code themes to IDA Pro themes.
Go
81
star
13

safe_capcom

Capcom wrapper with safety in mind.
C
77
star
14

xstd

A portable header only library extending the C++20 STL.
C++
64
star
15

hvdetecc

Collection of hypervisor detections
C++
17
star
16

llvm-patches

Personal curation of Clang/LLVM patches.
12
star
17

selene

Kernel-mode Paravirtualization in Ring 2, LLVM based linker, and some other things!
C++
11
star
18

troto

TypeScript to Protobuf transpiler.
TypeScript
11
star
19

gengo

Generate Go bindings for shared C libraries.
Go
10
star
20

retro

Experimental static analysis framework.
C++
10
star
21

Myelin

Header-only CUDA accelerated DNN library
Cuda
8
star
22

turing-incomplete

TypeScript
4
star
23

xedpp

Tiny wrapper around xed API.
C++
1
star