Xyrem/Yumekage
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity
Demo proof of concept for shadow regions, and implementation of HyperDeceit.
18 commits 1 branch 0 tags 2.1 MiB
  • C++ 100%
Find a file
Exact
Aryan 7f1695742a
 Update HyperDeceit to fix issue #2
2023-05-31 16:06:10 +05:30
Media Add demo gifs 2023-04-08 18:54:42 +05:30
Yumekage Update HyperDeceit to fix issue #2 2023-05-31 16:06:10 +05:30
YumekageUser Added Yumekage to github 2023-04-08 18:44:41 +05:30
README.md Updated README to link HyperDeceit repo. 2023-05-13 11:50:40 +05:30
Yumekage.sln Added Yumekage to github 2023-04-08 18:44:41 +05:30

README.md

Yumekage

This repository contains a demo proof of concept implementation for shadowing memory regions in Windows. It was created as part of a blog post discussing the topic and also serves as a basis for the HyperDeceit project which is available at https://github.com/Xyrem/HyperDeceit.

Please do not use this code for production, as it is no where near ready for it. However bug reports and feedback are welcome.

Blog post: https://reversing.info/posts/guardedregions

Media

Demo Windows Demo WinDbg

Credits

  • Everdox for coming up with the idea of abusing context swaps to create hidden memory.