Alternatives and similar repositories for ida_vmware_windows_gdb:

Users that are interested in ida_vmware_windows_gdb are comparing it to the libraries listed below

• brew02 / BudgetEPT
  Create stealthy, inline, EPT-like hooks using SMAP and SMEP
  ☆36Updated 5 months ago
• samshine / VoyagerWithEPT
  ☆34Updated 2 years ago
• xu-Wan / HypercallPageHook
  POC Hook of nt!HvcallCodeVa
  ☆50Updated last year
• 1401199262 / NMIStackWalk
  ☆71Updated 2 years ago
• gmh5225 / ida-find-.data-ptr
  A simple ida python script to find .data ptr
  ☆50Updated last year
• BeneficialCode / KReClassEx
  Kernel ReClassEx
  ☆65Updated last year
• misslng / boundcallback
  ☆26Updated last year
• POPFD / HypervisorBase
  A library for intel VT-x hypervisor functionality supporting EPT shadowing.
  ☆49Updated 4 years ago
• saveme712 / BinCon
  A library to assist with memory & code protection.
  ☆53Updated last year
• helloobaby / Nmi-Callback
  detect hypervisor with Nmi Callback
  ☆34Updated 2 years ago
• GetRektBoy724 / KPDB
  Windows PDB parser for kernel-mode environment.
  ☆95Updated 2 years ago
• Sinclairq / tp-emulator
  A basic 100 loc CPU emulator using the existing code of ntoskrnl.exe
  ☆71Updated last year
• tandasat / recon2024_demo
  Provides commands to read from and write to arbitrary kernel-mode memory for users with the Administrator privilege. HVCI compatible. No …
  ☆15Updated 9 months ago
• SamuelTulach / SecureHack
  Cheat for my own game SecureGame which uses a bootkit to hyperjack Hyper-V in order to access VBS enclave's memory
  ☆37Updated 3 months ago
• Archie-osu / ZenHv
  my first hypervisor.
  ☆16Updated 2 months ago
• Zpes / pte-protect
  ☆30Updated 2 years ago
• Rythorndoran / SessionMapper
  将驱动映射到会话空间
  ☆34Updated 2 years ago
• EBalloon / MapPage
  Mapping your code on a 0x1000 size page
  ☆72Updated 2 years ago
• 0xf1a / DSMM
  Discarded Section Manual Map
  ☆66Updated 4 years ago
• Ynob2000 / MappedCallback
  Register a callback in Kernel from a manually mapped driver
  ☆40Updated 3 years ago
• gmh5225 / FakeEnclave
  A poc that abuses Enclave
  ☆37Updated 2 years ago
• ekknod / Nmi
  Old way for blocking NMI interrupts
  ☆26Updated 2 years ago
• Oliver-1-1 / EtwKeyboardDetection
  ☆29Updated 6 months ago
• busy10 / NoScreen
  Hiding the window from screenshots using the function win32kfull::ChangeWindowTreeProtection
  ☆10Updated 3 years ago
• mibho / x64dbg-vmp-trace
  unorthodox approach to analyze a trace, but this helped me get comfy with x64 instructions overall (excluding sse/avx/etc lol), cleared u…
  ☆57Updated last year
• MatrixKung / ntoskrnl
  Windows Kernel nt files - To research windows kernel
  ☆15Updated 4 years ago
• kkent030315 / anyvtop
  x64 Windows implementation of virtual-address to physical-address translation
  ☆40Updated 3 years ago
• ekknod / KiSystemStartupMeme
  Custom KiSystemStartup, can be used to modificate kernel before boot.
  ☆52Updated 2 years ago
• LowLevelSys / physmem_remapper
  ☆23Updated 4 months ago
• pTerrance / alpc-km-um
  POC usermode <=> kernel communication via ALPC.
  ☆53Updated 9 months ago