nanabingies/HOOK-IRP nanabingies/HOOK-IRP

  • Stars
    star
    6
  • Rank 2,468,970 (Top 50 %)
  • Language
    C++
  • Created over 1 year ago
  • Updated over 1 year ago
Twitter logo Share LinkedIn logo Share Facebook logo Share
nanabingies/HOOK-IRP
github

nanabingies

Reviews

There are no reviews yet. Be the first to send feedback to the community and the maintainers!

Repository Details

POC to show hooking various IRP major functions in existing drivers

More Repositories

1

CVE-2021-21551

Dell Driver EoP (CVE-2021-21551)
C++
24
star
2

x64-Page-Walker

Walks through the 4-level paging structures in Windows x64
C++
14
star
3

Practical-Reverse-Engineering-Solutions

Solutions to some exercises in the book Practical Reverse Engineering: x86, x64, ARM, Windows Kernel, Reversing Tools, and Obfuscation 1st Edition by Bruce Dang
C++
13
star
4

Driver-RW

Page Table Manipulation -- CVE-2018-19321
C++
6
star
5

Simple-Hypervisor

A Simple Intel Hypervisor
C
5
star
6

gdrv.sys

Reverse Engineering the Vulnerable Gigabyte Driver
Assembly
5
star
7

Reversed-Drivers

A collection of kernel mode drivers I have analyzed together with some interesting code samples
Assembly
4
star
8

0xtavian

Interlace C++
C++
4
star
9

KMDF

Hooking NtCreateFile on x64 Systems
C
3
star
10

ADV64DRV

Reverse Engineering ADV64 Kernel Driver
Assembly
3
star
11

CAPCOM.SYS

Reversed Code of Capcom Driver
Assembly
3
star
12

PE-File-loader

Dumps the contents of a PE File
C++
3
star
13

KiLogr

Reverse Engineering the KiLogr driver
Assembly
2
star
14

CVE-2019-16724

Exploit for CVE-2019-16724
Python
2
star
15

B3

question B3 of the java IA
Java
2
star
16

DLL_Injection

Sample DLL Injection Code
C++
2
star
17

CVE-2018-19321

CVE-2018-19321
C++
2
star
18

gimo

command line text editor
Shell
2
star
19

HEVD-

C++
2
star
20

Windows-Internals-Build-10.0.-18362-

Another Windows Internals repo
C++
1
star