This project showcases manual memory allocation in a process without relying on usermode memory APIs
It is composed of three main components:
-
injector
A kernel driver that communicates with the usermode process through a shared memory page to allocate and map the DLL into the target process. -
usermode
A usermode application that interfaces with the kernel driver to facilitate the allocation process. -
usermode-lib
A dummy DLL used for testing purposes.
- Windows 10 x64 22H2
- AMD/Intel
- Ensure that Microsoft Hyper-V is disabled
- Launch
usermode.exe [path_to_dll] [target_process] - Sign and load the driver. Otherwise, use kdmapper, KDU
- Enjoy!
- Frostiest - R/W physical memory
- @SamuelTulach - README design
