GitLab

Hyper-V Hacking Framework For Windows 10 x64 (AMD & Intel)

Vulnerable Driver Manipulation

Process Cloning

handle elevation using bedaisy. write up can be found here https://back.engineering/21/08/2020/

inject a process into your context.

Jit linker, mapper, obfuscator, and mutator

old probe from 6/xx/2020 to test theoretical page table concepts

/proc/kmem reimplementation for windows

Process-Context Specific Kernel Driver Mapper (PSKDM)

Type-2 Intel hypervisor for Windows 10 systems

Paging Table Manipulation From Usermode

unfairgames reverse engineered.

inserts a PML4E where a prior PML4E is set to not present, pointing at the PDPT that contains the dll.

systematic exploitation of physical read/write to map unsigned code into the kernel.

elevate arbitrary MSR writes to kernel execution

VMProtect Devirtualization

header only library for NtLoadDriver/NtUnloadDriver.

VMProtect 2 Virtual Instruction Assembler

VMProtect 2 Virtual Machine Handler Emulation

reverse engineering of bedaisy.sys (battleyes kernel driver)