bad-echo-driver

Protect, Unprotect, Filter handles, Create handle, and Read memory by abusing a signed Kernel driver.

Features

• Strip process / thread handles with ObRegisterCallback.
• Mark and unmark process as a protected process.
• Create handle
• Read memory

Dependencies

• kita - ImGui and GLFW boilerplate
• imgui_club - For the hex editor component

Thanks

• eternal / sam - Providing the binaries