Top Rating
- Top Contributors
  Discover the Top Open Source contributors by country or by language
- Interviews
  Discover real stories from Open Source developers
Discover

Discover your Favorite Language
Discover the top trending repositories and projects on Github. Explore the latest trends in your preferred languages.

TypeScript

Haskell

Groovy

Dart

Go

Objective-C

CoffeeScript

PHP

More Languages
Awesome

Awesome repositories
Discover the most awesome repositories and projects of your favorite languages. Inspired by the Awesome-* lists trend in GitHub.

Python

Swift

C#

Scala

Racket

F#

Elm

Java

More Languages
By Country

Rankings by Country
Discover the community of talented open source contributors in each country.

🇷🇪 Réunion

🇲🇱 Mali

🇩🇰 Denmark

🇦🇹 Austria

🇸🇸 South Sudan

🇮🇹 Italy

🇻🇳 Vietnam

🇲🇹 Malta

All Countries Compare Countries

gmh5225/CallMeWin32kDriver

Stars
182
Rank 211,154 (Top 5 %)
Language
C++
License
MIT License
Created about 2 years ago
Updated over 1 year ago

gmh5225/CallMeWin32kDriver

gmh5225

There are no reviews yet. Be the first to send feedback to the community and the maintainers!

Load your driver like win32k.sys

CallMeWin32kDriver

Load your driver like win32k.sys

Motivation

This feature was analyzed from a certain PUBG cheat driver.

What it can do?

Protection against direct dump by Anti-Rootkit tools
Bypass MmCopyMemory
Hide world does not trigger PG

How to detect?

Attach a GUI process before using MmCopyMemory

Compile

Visual Studio 2022 & WDK10
llvm-msvc [link]

Some discussions on UnknownCheats

https://www.unknowncheats.me/forum/anti-cheat-bypass/511107-load-driver-win32k-sys.html

awesome-game-security

awesome game security [Welcome to PR]

awesome-llvm-security

awesome llvm security [Welcome to PR]

FakeEnclave

A poc that abuses Enclave

Detection-CheatEngine

Using ReadDirectoryChangesW to detect CheatEngine

ntoskrnl_file_collection

Collect various versions of ntoskrnl files

Driver-SoulExtraction

SoulExtraction is a windows driver library for extracting cert information in windows drivers

BlackSignatureDriver

Black Signature Driver

CVE-2022-44721-CsFalconUninstaller

HideDriverTesting

Only for Stress-Testing

LetMeGG

POC about how to prevent windbg break

kli-ex

Expanding Kernel Lazy Importer

Go-Detection-Hyper-v

A simple Go program that detects whether the current Windows system is running inside a Hyper-V virtual machine environment(Guest) using CPUID instruction.

frida-il2cpp-datacollector

Porting ce's monodatacollector to android/ios.

llvm-msvc-compatibility

llvm-msvc-compatibility

kcpplib

The driver STL library used by myself

QuickPGTrigger

The stress testing of your PG bypass [old school project]

IDA-MapSymbolParser

IDA Map File Symbol Renamer

CVE-2022-35737

Stranger strings: CVE-2022-35737

AntiKernelDebug-POC

POC about how to detect windows kernel debug by pool tag.

X64DBG-ViewDllNotification

X64DBG plugin viewing dll notification

static-build-qt6

static-build-qt6

Alaa-8ball-pool-source-exposed

8ball pool heck

kernel-callback-functions-list

Common-Registry-Jmp-RCX

Common-Registry-Jmp-RCX

Driver-HideKernelThread-IoCancelIrp

not my code. only for saving

LLVMWindowsDriverTest

A project only for testing windows driver by llvm-msvc.

NtUserInjectMouseInput-syscall

Not mine. Only for saving.

Disabling-Hyper-V

Disabling-Hyper-V

Hook-HvlSwitchVirtualAddressSpace

Not mine. Only for saving

UE-UnrealEngineSDK

Universal Cheat development kit for UnrealEngine games

CCPELib

Yet another PE file manipulation library.

using-git-on-tor

using git on tor

dwmhook

Not my code. only for saving

cs2-sdk-1

Counter-Strike: 2 Cheat Base/SDK

Apex-ApexCheeseTest

EasyPatternScanner

Easy Pattern Scanner

Driver-Communication-List

Driver-Communication-List

LLVMIntrinsicRewrite

LLVM Intrinsic rewrite for windows driver.

Driver-KeAttachProcess-KeDetachProcess-rebuild

not my code. only for saving.

AntiCheat-chrysalis

A small client-side user-mode anti-cheat.

Comm-data-ptr-driver

An other Detected & Pasted driver

EAC-Kernel-Packet-Fucker

Not my code. Only for saving

nv-nvapi

cmake-efi-driver-testing

Tool-DIYSystemMemoryDump

DIY System Memory Dump

cmake-msvc-static

Enable static msvc runtime for cmake

win32k_file_collection2

win32k_file_collection2

memory-relocalloc

Not my code. Only for saving

will-never-forget

will never forget

Driver-HWID-btbd-modified

[1] Modified btbd spoofer that can be manually mapped

OBS-graphics-hook32-Hook

Not mine. Only for saving.

cocos-FirstPersonShooter-Testing

cocos-FirstPersonShooter-Testing

ollytlscatch

Automatically exported from code.google.com/p/ollytlscatch

win32k_file_collection

Collect various versions of win32k files

EasyPDBParser

raw_pdb wrapper

DBVM-build

Automatic building of DBVM

HandleProtectionTesting

Handle Protection Testing

VirtualBox-6.1.34

VirtualBox-6.1.34

VM-VirtualMachineProtector

Valorant-Hack-Esp-Aimbot-Driver-Injector-With-Spoofer-Temporary

Our eloquent Valorant wallhack takes care of this by letting you see your opponents through walls, obstacles, and objects. Using a Valorant ESP in your matches is a total gamechanger because it allows you to quickly formulate a strong competitive advantage,

github-action-docs

bindead

from https://bitbucket.org/mihaila/bindead/src/master/

lld-win-xp

Make lld to support win-xp

CXX-Exception-V4

CXX-Exception-V4

Patch-ValidateNTTargetVersion

Fix "The "ValidateNTTargetVersion" task could not be loaded" in VS2015

cmkr-llvm-template

cmkr-llvm-template

PTM

Saving _xeroxz‘PTM

cheat-attack-thread-slemu

A simple SCP-SL Anti-cheat usermode emulator

GameEngine-CX3D

CX3D is an easy to use Game Framework for the development of 3D Games in C++.

IDA-KallsymsSymbolRenamer

A utility script for IDA Pro to rename symbols based on Android kernel kallsyms files, facilitating kernel analysis by aligning IDA symbols with kernel symbols.

Interep-Driver-Leak

Driver-kaldereta

Unsigned Kernel Mode Driver that does memory modifications

Allocating-individual-pages

Not my code. Only for saving

gmh5225.github.io

keystone-retdec

keystone-retdec

Paladins-Internal-Esp-Aimbot-Hack-Cheat-Hack

Paladins is a team-based hero shooter that is free-to-play and a whole lot of fun. The game offers some strategy elements and real-time character progression for players. If you’re a fan of games such as Overwatch, you’ll likely get a big kick out of Paladins.

Overwatch-External-Esp-Aimbot-Hack-Cheat

With Overwatch cheats and hacks, you can easily attack the objective, wipe your enemy clans, capture the point, and earn an uninterrupted progress experience until the final mission. Our Overwatch cheats and hacks will help you

PlayerUnknown-s-Battlegrounds-Pubg-Steam-Hack-Esp-Aimbot

Box - Draw a frame around enemies. Box Type - Change the frame type [2D/3D]. ESP Name - Show player names. ESP Team - Similar color for distance numbers to enemies in one team. ESP HP - Show HP bar. HP Type - [vertical bar, horizontal bar, number]. Skeleton - Show player skeleton. Distance - Show the distance to enemies and objects. Line - Show lines from the top of the screen to enemies and AirDrops. Kill Count - Show kill count.

AndroidDriveSignity

AndroidDriveSignity is a Python utility designed to bypass driver signature verification in Android kernel(ARMv8.3), facilitating the loading of custom drivers

proof-market-v2