bekoo

maldev. ⚠️ Malware Development training ⚠️

SSDT-Hooking. The project uses SSDT Hooking to bypass security checks during driver loading by hooking NtLoadDriver and modifying the PreviousMode flag.

Malware-Resurrection. This project enables malware to resurrect and remain hidden even after termination, using a User-Mode Program and Kernel-Mode Driver as part of the Malware Resurrection technique.

DLL-Injector. Simple DLL Injector Program Written in C

WinKernelDev. Windows Kernel Development

Silence-of-Naunet. This project uses the SetVariable() hook to store the rootkit payload in hidden memory.

WhiteLotus. UEFI Bootkit PoC that demonstrates pre-OS kernel integrity subversion on Windows 10/11 with Secure Boot disabled.

Darkness-Of-Naunet. A SMM-based bootkit that exploits the ThinkPwn vulnerability to allocate a memory in SMRAM and write data to it