Skip to content

Dynamic BYOVD-based mapper that has capabilities to change implementations for unsigned driver mapping

Notifications You must be signed in to change notification settings

shaygitub/ShayMapper

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

9 Commits
 
 
 
 

Repository files navigation

ShayMapper

ShayMapper is an addition above the kdmapper project to make it alot easier to integrate different vulnerable drivers for the end result of loading an unsigned driver into the memory. if the specific needed operations (i.e IOCTL-controlled memory copy) are not implemented by any additional driver, they will be implemented automatically by the regular intel driver as it implements all operations.

to add a new driver for the loading process you will need to do the following:

  1. create the needed IOCTL trigger functions by the needed format for each operation in TriggerOperations
  2. Implement a Load() function that will register all needed trigger functions, create a file for the driver (either from memory buffer or in another way) and get a handle to the file that will be returned
  3. add the handle to the array of running drivers, increment the count of running drivers and add the running driver index for each implemented operation

About

Dynamic BYOVD-based mapper that has capabilities to change implementations for unsigned driver mapping

Resources

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published

Languages