Zer0Mem0ry / KernelReadWriteMemory

Simple code to manipulate the memory of a usermode process from kernel.

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

KernelReadWriteMemory

Simple proof of concept -code to manipulate the memory of a usermode process from kernelmode of a windows NT operating system. This is complished by using the undocumented NT API "MmCopyVirtualMemory" function in ntoskrnl.exe.

This works for both x64 & x86 processes.

About

Simple code to manipulate the memory of a usermode process from kernel.


Languages

Language:C 100.0%