 Maxime Meignan
|
f15471d12c
|
DSE bypass : implemented "callback swapping" method
The new default method for unsigned driver loading uses a KDP compatible
technique, since it does not overwrite the protected variable g_CiOptions.
Based on the work of: https://github.com/0mWindyBug/KDP-compatible-driver-loader
Co-authored-by: Windy Bug <139051196+0mWindyBug@users.noreply.github.com>
|
2023-11-03 15:13:36 +01:00 |
|
|
Maxime Meignan
|
7590a11389
|
CiOptions: Simplifies the way CI.dll base address is recovered
Instead of using the kernel R/W primitive, uses userland API to enumerate
kernel modules
|
2023-10-09 16:30:36 +02:00 |
|
|
Maxime Meignan
|
0b0086ea92
|
cosmetic changes & compiler warnings fixes
|
2023-10-09 14:57:49 +02:00 |
|
|
v1k1ngfr
|
7be844b518
|
Add feature : loading unsigned driver
|
2023-10-06 12:48:29 +02:00 |
|