br-sn/CheekyBlinder
Enumerating and removing kernel callbacks using signed vulnerable drivers
Repository profile
A simple 200 LOC kernel driver that displays a bitmap after a BSOD.
Repository updates
Get generated AnalogFeelings/KmdfMandelcheck development summaries by email, or follow the weekly and monthly RSS feeds.
Sign in to subscribe by email. RSS feeds are public.
Sign in to subscribeTracked growth, recent movement, and commit velocity from stored repository snapshots.
Latest capture 2026-06-24 13:06
1 capture since 2026-06-24
Stars from baseline 0
All tracked data
Frameworks, package managers, ecosystems, and dependency manifests found during catalog scans.
Scanned 2026-06-24 13:06
Mandelcheck.sln
dotnet ecosystem,
0 dependencies
Searchable topics, generated tags, and stack labels that explain where this repository fits.
Agent instructions and tool configuration paths found in the repository tree.
Nearest indexed repositories by embedding similarity.
Enumerating and removing kernel callbacks using signed vulnerable drivers
Kernel Driver Utility
kernel mode anti cheat
HackSys Extreme Vulnerable Driver (HEVD) - Windows & Linux
A proof of concept demonstrating communication via mapped shared memory structures between a user-mode process and a kernel-mode payload on Windows 10 20H2.
The program draws with win32k gdi functions in the kernel while NtGdiDdDDISubmitCommand is being hooked.