mirror of
https://github.com/0xJs/BYOVD_read_write_primitive
synced 2026-06-06 15:04:29 +00:00
0xjs
24 lines
748 B
C
24 lines
748 B
C
/*
|
|
Store all variables and settings used across the project
|
|
*/
|
|
|
|
#pragma once
|
|
|
|
// Define path for the driver file
|
|
#define g_VULNDRIVERPATH L"\\System32\\Drivers\\" // Default runtime-loaded kernel drivers
|
|
|
|
// Define variables for the vulnerable driver
|
|
#define g_VULNDRIVERNAME L"RTCORE"
|
|
#define g_VULNDRIVERFILENAME L"RTCore64.sys"
|
|
#define g_VULNDRIVERSYMLINK L"\\\\.\\RTCore64"
|
|
|
|
// Define IOCTL codes
|
|
#define RTCORE64_MEMORY_READ_CODE 0x80002048
|
|
#define RTCORE64_MEMORY_WRITE_CODE 0x8000204C
|
|
|
|
/*
|
|
* PspCreateProcessNotifyRoutine / PspCreateThreadNotifyRoutine max: 64 callbacks
|
|
* PspLoadImageNotifyRoutine max: 8 callbacks
|
|
* Source: https://blog.gentilkiwi.com/retro-ingenierie/windbg-notifications-kernel
|
|
*/
|
|
#define PSP_MAX_CALLBACKS 0x40 |