PatchGuard bypass at runtime
| #1033 Title: Administrator |
02/26/2025 21:11 - 13 days 15 hours 58 minutes #1033 |
#1032 Originally posted by A visitor : https://overlayhack.com/patchguard-bypass#1032
Yes. I've just adapted the bypass. There were many changes. Also DSE bypass works as described in the first post. To summarize what's included:
- A manually mapped loader driver with DSE bypass at runtime that loads a PatchGuard bypass driver directly from the kernel
- A shared memory communication between the two drivers
- The code itself is very informative in terms of learning Windows internals
Post your Telegram in a comment and I'll add you if you're interested to purchase the source code. 2,499 USD in BTC. Thanks.
Yes. I've just adapted the bypass. There were many changes. Also DSE bypass works as described in the first post. To summarize what's included:
- A manually mapped loader driver with DSE bypass at runtime that loads a PatchGuard bypass driver directly from the kernel
- A shared memory communication between the two drivers
- The code itself is very informative in terms of learning Windows internals
Post your Telegram in a comment and I'll add you if you're interested to purchase the source code. 2,499 USD in BTC. Thanks.
