Pinned Repositories
blackout
cpp_async_file_hashing
Asynchronous MD5 file hashing in C++ using futures.
donations
hygieia
Hygieia, a vulnerable driver traces scanner written in C++ as an x64 Windows kernel driver.
instrumentation_callbacks
A proof of concept demonstrating instrumentation callbacks on Windows 10 21h1 with a TLS variable to ensure all syscalls are caught.
kernel_payload_comms
A proof of concept demonstrating communication via mapped shared memory structures between a user-mode process and a kernel-mode payload on Windows 10 20H2.
kernel_sockets_memory
Kernel-based memory hacking framework communicating with a kernel driver via sockets.
pagewalkr
An x64 page table iterator written in C++ as a kernel mode windows driver.
poc_close_handle
CloseHandle hooking proof of concept in C++.
syscall_extractor
A C++ syscall ID extractor for Windows. Developed, debugged and tested on 20H2.
Deputation's Repositories
Deputation/hygieia
Hygieia, a vulnerable driver traces scanner written in C++ as an x64 Windows kernel driver.
Deputation/instrumentation_callbacks
A proof of concept demonstrating instrumentation callbacks on Windows 10 21h1 with a TLS variable to ensure all syscalls are caught.
Deputation/pagewalkr
An x64 page table iterator written in C++ as a kernel mode windows driver.
Deputation/kernel_sockets_memory
Kernel-based memory hacking framework communicating with a kernel driver via sockets.
Deputation/kernel_payload_comms
A proof of concept demonstrating communication via mapped shared memory structures between a user-mode process and a kernel-mode payload on Windows 10 20H2.
Deputation/syscall_extractor
A C++ syscall ID extractor for Windows. Developed, debugged and tested on 20H2.
Deputation/poc_close_handle
CloseHandle hooking proof of concept in C++.
Deputation/cpp_async_file_hashing
Asynchronous MD5 file hashing in C++ using futures.
Deputation/blackout
Deputation/fast-string
Convert strings to little endian hexadecimal representation for fast, compiler-friendly comparisons.
Deputation/GreyM
Me fockin' pe protector
Deputation/wdmcpp
Visual Studio Project example for using Microsoft's STL in WDM (Windows Kernel-mode Driver)
Deputation/donations
Deputation/dive
A tool for exploring each layer in a docker image
Deputation/js2php
Converting Javascript .json files to PHP associative arrays.
Deputation/limba
compile-time control flow obfuscation using mba
Deputation/llm.c
LLM training in simple, raw C/CUDA
Deputation/robotSpace
Deputation/wdbgark
WinDBG Anti-RootKit Extension