Pink-Eye
March 14, 2023 ยท View on GitHub
Features:
- Hooking ObRegisterCallbacks And Registering Our Own Callback Within A Valid Module Via A Code Cave
- Patching IAT Integrity Check Using ExAllocatePool To Fail The Execution Of The Function
Credits:
- https://www.unknowncheats.me/forum/c-and-c-/415662-kernel-code-cave-poc.html
- https://www.unknowncheats.me/forum/anti-cheat-bypass/148364-obregistercallbacks-countermeasures.html
- BadEye (Xeroxz)
- Aterror2be & Gotcha
