Example Usage
// 82 KB version (patched) — deliberately clears the pointer:
v3 = MmGetSystemRoutineAddress(L"MmCopyMemory");
if (v3 >= 0) {
*(a1 + 24) = 0; // ← NULLs it — SubCmd 12 is dead
}
// 333 KB version (vulnerable) — stores the pointer:
ptr = MmGetSystemRoutineAddress(L"MmCopyMemory");
if (ptr) {
*(this + 0x18) = ptr; // ← Keeps it — SubCmd 12 works
}
See also
graphql-cop
Open Source
Security Auditor Utility for GraphQL APIs…
1earn
Free
ffffffff0x 团队维护的安全知识框架,内容包括不仅限于 web安全、工控安全、取证、应急、蓝队设施部署、后渗透、Linux安全、各类靶机writup…
AES-Encoder
Open Source
PowerShell Obfuscator. A PowerShell script anti-virus evasion tool…
ntlm_theft
Open Source
Creates malicious files (LNK, SCF, PDF, DOCX, etc.) that force a Windows system to authenticate to a…
msfvenom
Open Source
Kali
Metasploit standalone payload generator and encoder. Creates payloads for all platforms with customi…
Red-Team-Rust
Open Source
A beginner-friendly collection of Rust notes focused on Red Team Tooling • Malware Development • Sys…