johnsonjason/KeProcessOverlay johnsonjason/KeProcessOverlay

  • Stars
    star
    21
  • Rank 1,084,038 (Top 22 %)
  • Language
    C
  • Created over 7 years ago
  • Updated over 7 years ago
Twitter logo Share LinkedIn logo Share Facebook logo Share
johnsonjason/KeProcessOverlay
github

johnsonjason

Reviews

There are no reviews yet. Be the first to send feedback to the community and the maintainers!

Repository Details

Reading/writing memory from kernel-mode

More Repositories

1

RVDbg

RVDbg is a debugger/exception handler for Windows processes and has the capability to circumvent anti-debugging techniques. (Cleaner, documented code base being worked on in: core branch)
C++
71
star
2

RudiAC

A client-sided anti-cheat developed during a freelance project to "plug-in" to a proprietary client for a private server. Includes memory integrity checks, thread execution restrictions, hook detection, memory honeypots, and more.
C++
55
star
3

vmemory

Cross-platform library for reading/writing memory in other processes for Rust
Rust
52
star
4

Remote-Thread-Executor

Code injection by hijacking threads in Windows 32-bit applications
C++
42
star
5

UTKModule

Modifies the code of the RtlUserThreadStart callback and reads the arguments passed to it. Then it changes the initial execution argument for the thread to a different location, but with the same executable memory. Bypasses some generic memory integrity checks.
C
13
star
6

MemDiff

Record the modifications that software arbitrarily makes to other processes code and data sections, then generate code "macros" reflecting those changes.
C++
9
star
7

Python-Object-Explorer

Allows the inspection of how Python objects are mapped in the memory of a foreign Python runtime, it can intercept processes that are interpreted or are executing native code via static compilation by projects like Nuitka
C++
7
star
8

APIHook-Library

Library for using API hooks to change the control flow of subroutine(s) and use plain-text for lookup-based hooks.
C++
5
star
9

authzsec-mod-um

This is a project serving as a supplementary security module as a user-mode interface to a kernel-mode service using Windows ACLs and (TBA) AppContainer technology and other forms of object isolation.
C++
5
star
10

WPSet

This source sets the cr0 register (control register) then changes the write protection bit and disables it temporarily.
C
3
star