fengjixuchui / IOCTL-hook

realExtern.sys driver

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

example usage functions in driverCommands.h

realExtern

kernel driver that hooks ioctl with multiple abilities such as sig scanning and read/writing

it simply places a mov rax, xxx jmp rax inside of DiskDeviceControl and directs code flow to realExtern.sys

hook offsets may change across windows updates.

WARNING:

it is detected and the code is very messy.

Find a better communication method (for example function pointer replacement) for your driver cheat.

read this source for an example of how to use:

About

realExtern.sys driver


Languages

Language:C++ 70.1%Language:C 29.9%