0vercl0k / windbg-scripts

Related projects: ⓘ

• hugsy / windbg_js_scripts
  Toy scripts for playing with WinDbg JS API
  ☆213Updated 2 months ago
• ionescu007 / winipt
  The Windows Library for Intel Process Trace (WinIPT) is a project that leverages the new Intel Processor Trace functionality exposed by W…
  ☆361Updated last year
• saaramar / Deterministic_LFH
  Have fun with the LowFragmentationHeap
  ☆229Updated 3 years ago
• arizvisa / ida-minsc
  A plugin based on IDAPython for a functional DWIM interface. Current development against most recent IDA is in the "persistence-refactor"…
  ☆313Updated 2 weeks ago
• commial / ttd-bindings
  Bindings for Microsoft WinDBG TTD
  ☆193Updated last year
• patois / HRDevHelper
  HexRays ctree visualization plugin
  ☆368Updated last week
• koutto / ioctlbf
  Windows Kernel Drivers fuzzer
  ☆289Updated 7 years ago
• airbus-cert / ttddbg
  Time Travel Debugging IDA plugin
  ☆551Updated 2 months ago
• 0xcpu / ExecutiveCallbackObjects
  Research on Windows Kernel Executive Callback Objects
  ☆277Updated 4 years ago
• danigargu / deREferencing
  IDA Pro plugin that implements more user-friendly register and stack views
  ☆516Updated last year
• airbus-cert / comida
  An IDA Plugin that help analyzing module that use COM
  ☆198Updated last year
• intelpt / WindowsIntelPT
  This driver implements the Intel Processor Trace functionality in Intel Skylake architecture for Microsoft Windows
  ☆416Updated 6 years ago
• sam-b / windows_kernel_address_leaks
  Examples of leaking Kernel Mode information from User Mode on Windows
  ☆574Updated 7 years ago
• Cisco-Talos / DynDataResolver
  ☆220Updated last year
• nccgroup / idahunt
  idahunt is a framework to analyze binaries with IDA Pro and hunt for things in IDA Pro
  ☆376Updated 11 months ago
• joxeankoret / idamagicstrings
  An IDA Python script to extract information from string constants.
  ☆300Updated 10 months ago
• repnz / windbg-cheat-sheet
  My personal cheat sheet for using WinDbg for kernel debugging
  ☆371Updated last year
• FSecureLABS / win_driver_plugin
  A tool to help when dealing with Windows IOCTL codes or reversing Windows drivers.
  ☆420Updated 6 years ago
• sibears / HRAST
  PoC of modifying HexRays AST
  ☆243Updated 4 years ago
• nihilus / IDA_Signsrch
  IDA Signsrch
  ☆150Updated 9 years ago
• fboldewin / COM-Code-Helper
  Two IDAPython Scripts help you to reconstruct Microsoft COM (Component Object Model) Code
  ☆177Updated 3 years ago
• secrary / idenLib
  idenLib - Library Function Identification [This project is not maintained anymore]
  ☆389Updated 5 years ago
• AndreyBazhan / SymStore
  The history of Windows Internals via symbols.
  ☆175Updated 2 years ago
• mandiant / FIDL
  A sane API for IDA Pro's decompiler. Useful for malware RE and vulnerability research
  ☆451Updated last year
• nccgroup / DriverBuddy
  DriverBuddy is an IDA Python script to assist with the reverse engineering of Windows kernel drivers.
  ☆350Updated 4 years ago
• cseagle / blc
  Integrate Ghidra's decompiler as an Ida plugin
  ☆414Updated 3 months ago
• gerhart01 / LiveCloudKd
  Hyper-V Research is trendy now
  ☆146Updated last month
• hugsy / defcon_27_windbg_workshop
  DEFCON 27 workshop - Modern Debugging with WinDbg Preview
  ☆701Updated last year
• 0xAlexei / WindowsDefenderTools
  Tools for instrumenting Windows Defender's mpengine.dll
  ☆271Updated 5 years ago
• murx- / devi
  Devirtualize Virtual Calls
  ☆109Updated 2 years ago