kernel-driver

Windows paravirtualized

Linux kernel driver for Wacom devices

A basic Direct Kernel Object Manipulation rootkit that removes a process from the EPROCESS list, hiding it from the Task Manager

Writing & Making Operating System and Kernel parts so simple like Hello World Programs, Starting from writing Bootloaders, Hello World Kernel, GDT, IDT, Terminal, Keyboard/Mouse, Memory Manager, HDD ATA R/W, VGA/VESA Graphics

RedSails is a Python based post-exploitation project aimed at bypassing host based security monitoring and logging. DerbyCon 2017 Talk: https://www.youtube.com/watch?v=Ul8uPvlOsug

The goal of the tool is to monitor requests received by selected device objects or kernel drivers. The tool is quite similar to IrpTracker but has several enhancements. It supports 64-bit versions of Windows (no inline hooks are used, only moodifications to driver object structures are performed) and monitors IRP, FastIo, AddDevice, DriverUnload and StartIo requests.

DR.CHECKER : A Soundy Vulnerability Detection Tool for Linux Kernel Drivers

Simple Intel CPU processor tracing on Linux

C++ STL in the Windows Kernel with C++ Exception Support

Casper-fs is a Custom Hidden Linux Kernel Module generator. Each module works in the file system to protect and hide secret files.

CMake module for building drivers with Windows Development Kit (WDK)

A mutation based user mode (ring3) dumb in-memory Windows Kernel (IOCTL) Fuzzer/Logger. This script attach it self to any given process and hooks DeviceIoControl!Kernel32 API and try to log or fuzz all I/O Control code I/O Buffer pointer, I/O buffer length that process sends to any Kernel driver.

An environment and set of utilities aimed at making kernel hacking simple and accessible

capcom-like executor for any physmem driver

Port of "DR.CHECKER : A Soundy Vulnerability Detection Tool for Linux Kernel Drivers" to Clang/LLVM 10 and Linux Kernel

Write Linux kernel drivers from scratch and hacking

Bringing kernel driver to C# with MichalStrehovsky's zerosharp

Some usefull info when reverse engineering Kernel Mode Anti-Cheat

File system minifilter driver for Windows to block symbolic link attacks.

Yocto Layer which provides basic support for Quectel wireless modules

Record & prevent process creation in kernel mode

USB-CAN Analyzer Linux Support

Keylogger driver for Windows

nrf24l01 linux device driver

A simple kernel-level plugin for ReClass.NET

🔍 Code to read / write the Process Memory from the Kernel 🔧

arbitrary kernel read/write in dbutil_2_3.sys, Proof of Concept Local Privilege Escalation to nt authority/system

Intel Processor Trace package collector for Windows

echo -n "hello world" > /dev/mkov (This is obscure)

injector for cheating C++