cnsuhao / win-sys

win-sys

驱动开发工程模板及工具包

1. src\driver-loader 驱动加载命令行
2. src\pe2array PE 文件转字节数组并加密，保存为头文件方便其他工程引用
3. https://github.com/eric21/MemPE
4. https://github.com/fancycode/MemoryModule
5. https://github.com/wyrover/unHooker
6. https://github.com/eric21/ssdt.Recover.21yu3
7. https://github.com/wessamza/R3R-BASE Ring3 rootkits - Base
8. https://github.com/wessamza/DpcCap
9. https://github.com/aaaddress1/HellKitty-In-VC Ring3 Rootkit Backdoor.
10. https://github.com/aaaddress1/ReflectiveDLLInjection 64 位注入
11. https://github.com/aaaddress1/APCInjector-BYPASS-AV
12. https://github.com/aaaddress1/Virus-Patten-API-Call
13. https://github.com/aaaddress1/Dad-sRoot hook 指定进程 API
14. https://github.com/aaaddress1/WinHTTP-Request-Hijacking-In-CSharp
15. https://github.com/aaaddress1/Dev-C-Homework/tree/master/Attack-KMPlayer_1440
16. https://github.com/aaaddress1/QACInjector-In-CBuilder
17. https://github.com/aaaddress1/HTTPs-WebClient-In-CBuilder
18. https://github.com/s18leoare/Hackshield-Driver-Bypass
19. https://github.com/redcodes/GameHack
20. https://github.com/redcodes/DevToolkit
21. https://github.com/redcodes/gh0st
22. https://github.com/sincoder/A-Protect
23. https://github.com/sincoder/hidedir 使用SSDT HOOK 在windows上隐藏指定文件或者文件夹
24. https://github.com/awendemo/SSDT-Hook
25. https://github.com/martinb3/windows_driver_model_tutorial 教程
26. https://github.com/Joshf2k/RegistryMonitor
27. https://github.com/wyrover/HKkernelDbg
28. https://github.com/hfiref0x/DSEFix Windows x64 Driver Signature Enforcement Overrider
29. https://github.com/hfiref0x/WinObjEx64
30. https://github.com/hfiref0x/TDL Driver loader for bypassing Windows x64 Driver Signature Enforcement
31. https://github.com/hfiref0x/ZeroAccess
32. https://github.com/hfiref0x/VBoxHardenedLoader
33. https://github.com/hfiref0x/LightFTP
34. https://github.com/hfiref0x/CVE-2015-1701
35. https://github.com/nikkov/Win-Widget
36. https://github.com/daynix/UsbDk
37. https://github.com/daynix/kvm-guest-drivers-windows 驱动编程批处理
38. https://github.com/Nextzero/WindowsDriver 教程
39. https://github.com/guidoreina/classes
40. https://github.com/guidoreina/password_generator
41. https://github.com/guidoreina/bplus-tree B+ 树
42. https://github.com/uri247/wdk81
43. https://github.com/gpoulios/ROPInjector shellcode
44. https://github.com/wyrover/rootkit.com
45. https://github.com/b3mb4m/shellsploit-framework shellcode
46. https://github.com/ambray/Ntfs
47. https://github.com/strozfriedberg/ntfs-linker
48. https://github.com/tfairane/ReverseEngineering
49. https://github.com/tfairane/DKOM
50. https://github.com/tfairane/DetourAPIMonitor
51. https://github.com/ThomasThelen/AntiDebugging
52. https://github.com/scalys7/Vulnerable-Driver
53. https://github.com/ThomasThelen/DumpHeapMemory
54. https://github.com/scalys7/Privilege-Escalation-Framework/tree/master/Privilege%20Escalation%20Framework
55. https://github.com/scalys7/Windows-Kernel-Research
56. https://github.com/scalys7/Postion-Indipendent-Code-Framework
57. https://github.com/hfiref0x/ZeroAccess rootkit
58. https://github.com/XiphosResearch/exploits
59. https://github.com/MalwareTech/CreateDesktop
60. https://github.com/MalwareTech/AppContainerSandbox
61. https://github.com/MalwareTech/FstHook
62. https://github.com/MalwareTech/BasicHook
63. https://github.com/MalwareTech/ZombifyProcess
64. https://github.com/MalwareTech/UACElevator
65. https://github.com/mieleke/Win64-Rovnix-VBR-Bootkit
66. https://github.com/edix/LoadDll
67. https://github.com/edix/MalwareResourceScanner
68. https://github.com/edix/HiddenProcessDetection
69. https://github.com/benlinxy/CodeInjection
70. https://github.com/JonDoNym/peinjector
71. https://github.com/benlinxy/DllInjection_CreateRemoteThread
72. https://github.com/benlinxy/DllInjection_SetWindowsHookEx
73. https://github.com/tandasat/RemoteWriteMonitor
74. https://github.com/SekoiaLab/pe-tools

驱动安装

wdk 提供了驱动安装工具，有三种

• devcon.exe

• difxcmd.exe

• dpinst.exe

• https://github.com/unicornx/osrusbfx2/blob/master/windows/drvinst/device-and-driver-installation.md

• https://github.com/Quirkbot/QuirkbotWindowsDriverInstaller

• https://github.com/Plasmenoid/snappy-driver-installer