Skip to content

Commit f789f21

Browse files
authored
Create README.md
1 parent 7c9bc90 commit f789f21

File tree

1 file changed

+12
-0
lines changed

1 file changed

+12
-0
lines changed

README.md

Lines changed: 12 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,12 @@
1+
# memfuck
2+
A PoC designed to bypass all usermode hooks in a WoW64 environment.
3+
4+
MemFuck will unmap everything. Then you are free to execute code in an environment free of user-mode hooks.
5+
6+
Just don't rely on Rtl* functions or anything other than Nt* functions :)
7+
8+
To look up syscall numbers for your system, please visit: https://j00ru.vexillium.org/syscalls/nt/64/
9+
10+
Tested on Windows 10 x64 Build 19041.508
11+
12+
winternl.com

0 commit comments

Comments
 (0)