Pinned

1. NoPatchGuardCallback NoPatchGuardCallback Public archive

   x64 Windows PatchGuard bypass, register process-creation callbacks from unsigned code

   C 192 34

2. PageTableInjection PageTableInjection Public

   Code Injection, Inject malicious payload via pagetables pml4.

   C++ 190 57

3. MsIoExploit MsIoExploit Public

   Exploit MsIo vulnerable driver

   C++ 79 34

4. anycall anycall Public

   x64 Windows kernel code execution via user-mode, arbitrary syscall, vulnerable IOCTLs demonstration

   C++ 214 59

5. evil-mhyprot-cli evil-mhyprot-cli Public

   A PoC for Mhyprot2.sys vulnerable driver that allowing read/write memory in kernel/user via unprivileged user process.

   C++ 302 69

6. CVE-2022-42046 CVE-2022-42046 Public

   CVE-2022-42046 Proof of Concept of wfshbr64.sys local privilege escalation via DKOM

   C++ 158 26