0vercl0k / lockmem
This utility allows you to lock every available memory regions of an arbitrary process into its working set.
☆66Updated last year
Related projects ⓘ
Alternatives and complementary repositories for lockmem
- Helper idapython code for reversing kmdf drivers☆67Updated 2 years ago
- ☆44Updated 4 years ago
- clone of armadillo patched for windows☆46Updated 3 weeks ago
- ☆39Updated 3 years ago
- Tools made for my Hyper-V blog series @ https://foxhex0ne.blogspot.com/☆54Updated 4 years ago
- arbitrary kernel read/write in dbutil_2_3.sys, Proof of Concept Local Privilege Escalation to nt authority/system☆53Updated 3 years ago
- ☆60Updated 6 months ago
- Command like tool to print mitigation flags for running processes in a memory dump☆44Updated 4 years ago
- Binary Ninja plugin that can be used to apply Triton's dead store eliminitation pass on basic blocks or functions.☆58Updated 4 months ago
- devirtualization vmprotect☆61Updated last year
- Hooking the GDT - Installing a Call Gate. POC for Rootkit Arsenal Book Second Edition (version 2022)☆69Updated last year
- Report and exploit of CVE-2023-36427☆87Updated 11 months ago
- A fast execution trace symbolizer for Windows.☆130Updated 6 months ago
- Helper script for Windows kernel debugging with IDA Pro on VMware + GDB stub (including PDB symbols)☆62Updated last year
- vdk is a set of utilities used to help with exploitation of a vulnerable driver.☆39Updated 2 years ago
- Anti-Debug encyclopedia contains methods used by malware to verify if they are executed under debugging. It includes the description of v…☆49Updated last year
- ☆10Updated 2 years ago
- This repo contains EXPs about Vulnerable Windows Driver☆19Updated 5 months ago
- Different tools for Microsoft Hyper-V researching☆46Updated 5 months ago
- Control-Flow Graph (CFG) Visualizer for VSCode☆35Updated this week
- ☆131Updated last year
- IOCTLpus can be used to make DeviceIoControl requests with arbitrary inputs (with functionality somewhat similar to Burp Repeater).☆85Updated 2 years ago
- An example of how x64 kernel shellcode can dynamically find and use APIs☆103Updated 4 years ago
- Windbg2ida lets you dump each step in Windbg then shows these steps in IDA☆73Updated 4 months ago
- A static analysis tool that helps security researchers scan a list of Windows kernel drivers for common vulnerability patterns in drivers…☆54Updated 3 years ago
- PyKD DLLs for x86 and x64 platforms☆14Updated last year
- A fast execution trace symbolizer for Windows that runs on all major platforms and doesn't depend on any Microsoft libraries.☆84Updated last month
- ☆57Updated 2 years ago
- A KISS Rust crate to parse Windows kernel crash-dumps created by Windows & its debugger.☆33Updated 3 months ago