Covert kernel-to-usermode communication channel implemented via shared memory, hidden using DKOM (Direct Kernel Object Manipulation).
Windows Object Manager Manipulation via DKOM
All actions were carried out solely for the purpose of studying defensive systems and testing the functionality and effectiveness of the methods described. I strongly condemn any interference with someone else's process!
krnl-shm-comm is distributed under the MIT License.