0xGREG / registry-callbacks

UM-KM Communication using registry callbacks

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

Registry Callbacks

Introduction

This was my first attempt writing kernel code and communicating with the kernel, trying to hide it from BattlEye.

The communication method lets you manual map the driver because it registers the callback in a legit module.

Old code, badly written, should only be used for reference.

Credits

yousif - showing the jmp ecx trick

About

UM-KM Communication using registry callbacks


Languages

Language:C 93.9%Language:C++ 6.1%