Ecosyste.ms: Awesome
An open API service indexing awesome lists of open source software.
https://github.com/416rehman/uniq
A Windows kernel function hook system with a kernel-mode driver and a user-mode controller.
https://github.com/416rehman/uniq
anticheat driver ewdk hook kernel memory wdk win32
Last synced: about 1 month ago
JSON representation
A Windows kernel function hook system with a kernel-mode driver and a user-mode controller.
- Host: GitHub
- URL: https://github.com/416rehman/uniq
- Owner: 416rehman
- Created: 2023-06-30T00:44:05.000Z (over 1 year ago)
- Default Branch: main
- Last Pushed: 2023-06-30T01:26:41.000Z (over 1 year ago)
- Last Synced: 2024-05-20T22:23:13.541Z (6 months ago)
- Topics: anticheat, driver, ewdk, hook, kernel, memory, wdk, win32
- Language: C++
- Homepage:
- Size: 5.86 KB
- Stars: 1
- Watchers: 1
- Forks: 1
- Open Issues: 1
-
Metadata Files:
- Readme: README.md
Awesome Lists containing this project
README
# UNIQ
## Description
UNIQ is a simple usermode controller and kernelmode driver combo that hooks a native kernel function of your choice while allowing 2 way communication between the driver and the controller.
## Customizing
You can use the `common.h` file in the **UNIQWICU** project to change the various parameters such as the target process name, the function to hook, etc.
## Build
Make sure you have the [WDK](https://learn.microsoft.com/en-us/windows-hardware/drivers/download-the-wdk) installed (basically your Visual Studio IDE should have the Driver project template available).
Open the `UNIQ.sln` file in the root directory and build the solution in `Release` mode.
This will build both the UNIQWICK[ernel] and UNIQWICU[ser] projects.
*Note: Building the kernelmode driver (UNIQWICK[ernel]) in `Debug` mode will log debug messages to the kernel debugger.*
## Usage
After building you will have multiple files in the `x64/Release` (depending on your build config) directory.
### Kernelmode Driver
The kernel mode driver can be loaded using the `sc` command or by using a driver loader such as [OSR Driver Loader](https://www.osronline.com/article.cfm?article=157).
#### sc
You can load the driver using the `sc` command such as:
```
sc.exe create UNIQWICK binPath= "C:\Users\user\source\repos\UNIQ\x64\Release\UNIQWICK.sys" type= kernel
```
*Note: You will need to have [test signing mode](https://learn.microsoft.com/en-us/windows-hardware/drivers/install/the-testsigning-boot-configuration-option) enabled to load the driver using `Bcdedit.exe -set TESTSIGNING ON`.*
#### OSR Driver Loader
You can load the driver using [OSR Driver Loader](https://www.osronline.com/article.cfm?article=157) by selecting the driver file and clicking `Start Service`.
#### Manual Mapping
You can load the driver using manual mapping by using a tool such as [KDMapper](https://github.com/TheCruZ/kdmapper)
### Usermode Controller
The usermode controller can be run by simply double clicking the executable (in admin mode). Make sure the target process is running before starting the controller.
*Note: The controller will not work if the driver is not loaded.*
