hub / github.com/Xyrem/Yumekage
github.com/Xyrem/Yumekage @main
Chat with this repo
27 symbols
47 edges
12 files
13 documented · 48%
● updated 3y ago★ 3171 open issues
Browse by type
What it actually does AI analysis from the code graph — generated when you open this
loading…
README
Yumekage
This repository contains a demo proof of concept implementation for shadowing memory regions in Windows. It was created as part of a blog post discussing the topic and also serves as a basis for the HyperDeceit project which is available at https://github.com/Xyrem/HyperDeceit.
Please do not use this code for production, as it is no where near ready for it. However bug reports and feedback are welcome.
Blog post: https://reversing.info/posts/guardedregions
Media
Credits
- Everdox for coming up with the idea of abusing context swaps to create hidden memory.
Core symbols most depended-on inside this repo
Insert
called by 5
Yumekage/Misc/DynamicArray.hpp
Initialize
called by 4
YumekageUser/Comm/Comm.cpp
Destroy
called by 2
Yumekage/Misc/DynamicArray.hpp
Destroy
called by 1
YumekageUser/Comm/Comm.cpp
WhitelistCurrentThread
called by 1
YumekageUser/Comm/Comm.cpp
InitializeHiddenPages
called by 1
YumekageUser/Comm/Comm.cpp
FindPattern_C
called by 1
Yumekage/Utils/Utils.hpp
CreateShadowPages
called by 1
Yumekage/Paging/Paging.cpp
Shape
Languages
C++100%
Modules by API surface
Yumekage/Misc/DynamicArray.hpp10 symbols
YumekageUser/Comm/Comm.cpp4 symbols
Yumekage/Paging/Paging.cpp4 symbols
Yumekage/Main.cpp4 symbols
Yumekage/Utils/Utils.hpp2 symbols
Yumekage/HyperDeceit.hpp2 symbols
YumekageUser/Entry.cpp1 symbols
For agents
$ claude mcp add Yumekage \
-- python -m otcore.mcp_server <graph>