reflection101 Goto Github PK

awesome-bootkits-rootkits-development

A curated compilation of extensive resources dedicated to bootkit and rootkit development.

base

blacklotus

BlackLotus UEFI Windows Bootkit

blairhv

x64 intel hypervisor with vmcs, vmx and physical page support

blairinjector

Ring0 meme wey

easyanticheat-emulator

Simple DLL that spoofs EasyAntiCheat on most games

eficmake

CMake template for a basic EFI application/bootkit. This library is header-only, there is no EDK2 runtime!).

fecuritycodwebapi

Run on flask on VPS, used for auto page translation

hdewrapper

Find your offsets the cool way, :)

hyper-v-scripts

Hyper-V scripts

interdkom

Kernelmode driver with hijacked IOCTL payload, physical memory support and DTB bruteforce

memeory

Unlock paging table accesses on Windows.

memflow

physical memory introspection framework

nojector_kernel

van152 speedrun

onlycerts-poc

Whitelist certificates from ring3, cba add integrity checks to prevent program for being tampered with

pipedriver

Communicate from ring-0 to ring-3 using NamedPipes.

shmb

runtime shared memory ring0 example

smart-uefi

communicate through EFI variables without an EFI driver

ssdtmeme

Demonstrates SSDT hooking, technique often used by BattlEye. Only works in ring-0 privileges

ultracage

Config files for my GitHub profile.

umap

Temp repo to spoof btbd/umap edit date

unvirt_driver

tested on vgk

valorantoffsets

Always updated and freshly dumped with HdeWrapper

vmread-rs

Rust bindings for vmread

vulnkerneldriver-glc

w10m_unedited-decomp

Pure Hex-rays Decompiler Psudocode of various Windows 10 Mobile binaries, No edit have been done to the output, you will need to piece together each function, class etc.Provided "as-is"

wardenrekter

Emulate OW2 AC