A Kernel Driver that can be used for a cheat or malware base to circumvent common cache & structure table checks. PsLoadedModuleList however requires a PG Bypass on (Some) Machines > 22H2 Win10, Not Win 11
This is my EAC Bypass (Setup) Driver that offers an undetected communication and callback handler/hooking system through IOCTL.
This is a repo of my previous BEKernelDriver but updated to add better protections and a more detailed setup. also with a good bit of code cleanup.
My EAC & BE Rady CR3 Reading & Writing source that I use for my KM Drivers.
WinAPI Hooking tool that can dump data written to processes or to files through IO.
EPROCESS Unlinking example in "C" using DKOM Manipulation
PsLoadedModuleList Unlinking through DKOM Manipulation