zer0condition/IDTHook-x86

Stars
17
Rank 1,257,181 (Top 25 %)
Language
C++
Created over 1 year ago
Updated over 1 year ago

zer0condition/IDTHook-x86

zer0condition

There are no reviews yet. Be the first to send feedback to the community and the maintainers!

Detour hooking IRQ1 ISR through IDT (Interrupt Descriptor Table)

ReverseKit

x64 Dynamic Reverse Engineering Toolkit

mhydeath

Abusing mhyprotect to kill AVs / EDRs / XDRs / Protected Processes.

NVDrv

Abusing nvidia driver (nvoclock.sys) for physical/virtual memory and control register manipulation.

GDRVLoader

Unsigned driver loader using CVE-2018-19320

ZeroHVCI

Achieve arbitrary kernel read/writes/function calling in Hypervisor-Protected Code Integrity (HVCI) protected environments calling without admin permissions or kernel drivers.

ZeroThreadKernel

Recursive and arbitrary code execution at kernel-level without a system thread creation

Demystifying-PatchGuard

Demystifying PatchGuard is a comprehensive analysis of Microsoft's security feature called PatchGuard, which is designed to prevent unauthorized modifications to the Windows kernel. The analysis is done through practical engineering, with a focus on understanding PatchGuard's inner workings.

Reversing-a-signed-driver

Reverse Engineering a signed kernel driver packed and virtualized with VMProtect 3.6

Guarded-Regions-Bypass-Valorant

External Base for Valorant

GDRVLib

Virtual and physical memory hacking library using gigabyte vulnerable driver

Gloomy.cc-Fortnite

Open-Source External Fortnite Cheat

RWCommunication

Valorant-External

CritBSOD

Abusing RtlAdjustPrivilege and NtSetInformationProcess to cause a BSOD from usermode

OffsetStreaming

Simple program to stream offsets for your game cheat, Was reversing some p2c and decided to recreate a better version of this function for fun

memoryPy

DriverPEScan

Parse all driver PEs in current directory to scan for certain characteristics or section names