0vercl0k / windbg-scripts

Related projects ⓘ

Alternatives and complementary repositories for windbg-scripts

• hugsy / windbg_js_scripts
  Toy scripts for playing with WinDbg JS API
  ☆220Updated 4 months ago
• ionescu007 / winipt
  The Windows Library for Intel Process Trace (WinIPT) is a project that leverages the new Intel Processor Trace functionality exposed by W…
  ☆365Updated last year
• saaramar / Deterministic_LFH
  Have fun with the LowFragmentationHeap
  ☆232Updated 3 years ago
• intelpt / WindowsIntelPT
  This driver implements the Intel Processor Trace functionality in Intel Skylake architecture for Microsoft Windows
  ☆426Updated 6 years ago
• commial / ttd-bindings
  Bindings for Microsoft WinDBG TTD
  ☆213Updated last year
• arizvisa / ida-minsc
  A plugin based on IDAPython for a functional DWIM interface. Current development against most recent IDA is in the "persistence-refactor"…
  ☆319Updated last month
• airbus-cert / ttddbg
  Time Travel Debugging IDA plugin
  ☆553Updated 4 months ago
• repnz / windbg-cheat-sheet
  My personal cheat sheet for using WinDbg for kernel debugging
  ☆387Updated last month
• sam-b / windows_kernel_address_leaks
  Examples of leaking Kernel Mode information from User Mode on Windows
  ☆581Updated 7 years ago
• nccgroup / idahunt
  idahunt is a framework to analyze binaries with IDA Pro and hunt for things in IDA Pro
  ☆376Updated last year
• danigargu / deREferencing
  IDA Pro plugin that implements more user-friendly register and stack views
  ☆561Updated last month
• patois / HRDevHelper
  HexRays ctree visualization plugin
  ☆376Updated 2 months ago
• secrary / idenLib
  idenLib - Library Function Identification [This project is not maintained anymore]
  ☆388Updated 5 years ago
• Cisco-Talos / DynDataResolver
  ☆221Updated last year
• anhkgg / awesome-windbg-extensions
  awesome windbg extensions
  ☆313Updated 5 years ago
• airbus-cert / comida
  An IDA Plugin that help analyzing module that use COM
  ☆198Updated last year
• sibears / HRAST
  PoC of modifying HexRays AST
  ☆249Updated 4 years ago
• 0vercl0k / kdmp-parser
  A Windows kernel dump C++ parser library with Python 3 bindings.
  ☆193Updated 4 months ago
• FSecureLABS / win_driver_plugin
  A tool to help when dealing with Windows IOCTL codes or reversing Windows drivers.
  ☆422Updated 6 years ago
• 0xcpu / ExecutiveCallbackObjects
  Research on Windows Kernel Executive Callback Objects
  ☆278Updated 4 years ago
• nccgroup / DriverBuddy
  DriverBuddy is an IDA Python script to assist with the reverse engineering of Windows kernel drivers.
  ☆352Updated 4 years ago
• bruce30262 / TWindbg
  PEDA-like debugger UI for WinDbg
  ☆201Updated 7 months ago
• koutto / ioctlbf
  Windows Kernel Drivers fuzzer
  ☆296Updated 7 years ago
• cseagle / blc
  Integrate Ghidra's decompiler as an Ida plugin
  ☆420Updated 5 months ago
• joxeankoret / idamagicstrings
  An IDA Python script to extract information from string constants.
  ☆305Updated last year
• murx- / devi
  Devirtualize Virtual Calls
  ☆114Updated 2 years ago
• nihilus / IDA_Signsrch
  IDA Signsrch
  ☆152Updated 9 years ago
• 0xAlexei / WindowsDefenderTools
  Tools for instrumenting Windows Defender's mpengine.dll
  ☆273Updated 6 years ago
• yardenshafir / PoolViewer
  An application to view and filter pool allocations from a dmp file on Windows 10 RS5+.
  ☆124Updated last year
• quarkslab / rewind
  Snapshot-based coverage-guided windows kernel fuzzer
  ☆312Updated 2 years ago