AaLl86 / WindowsInternalsLinks
Contains all the applications developed for the Second part of the 7th Edition of Windows Internals book
☆110Updated last year
Alternatives and similar repositories for WindowsInternals
Users that are interested in WindowsInternals are comparing it to the libraries listed below
Sorting:
- The Windbg extensions to study Hyper-V on Intel and AMD processors.☆153Updated 4 months ago
- WinDbg extension written in Rust to dump the CPU / memory state of a running VM☆117Updated last month
- Report and exploit of CVE-2023-36427☆90Updated last year
- Different tools for Microsoft Hyper-V researching☆58Updated 3 weeks ago
- NovaHypervisor is a defensive x64 Intel host based hypervisor. The goal of this project is to protect against kernel based attacks (eithe…☆137Updated this week
- A Python script to download PDB files associated with a Portable Executable (PE)☆122Updated 5 months ago
- A fast execution trace symbolizer for Windows that runs on all major platforms and doesn't depend on any Microsoft libraries.☆94Updated 8 months ago
- Windows kernel debugger for Linux hosts running Windows under KVM/QEMU☆88Updated last month
- ☆74Updated last year
- ☆88Updated 5 months ago
- Winbindex bot to pull in binaries for specific releases☆48Updated last year
- bypassing intel txt's tboot integrity checks via coreboot shim☆70Updated 4 months ago
- Report and exploit of CVE-2024-21305.☆36Updated last year
- ☆71Updated 2 years ago
- A collection of tools, source code, and papers researching Windows' implementation of CET.☆84Updated 4 years ago
- ☆146Updated 2 years ago
- Windows kernel PDB data parsed into YAML☆39Updated 8 months ago
- An x64dbg plugin which helps make sense of long C++ symbols☆59Updated 2 years ago
- anti-ransomware file-system filter☆59Updated 10 months ago
- Abusing exceptions for code execution.☆111Updated 2 years ago
- ☆147Updated 2 months ago
- A few examples of how to trap virtual memory access on Windows.☆31Updated 6 months ago
- A set of LLVM and GCC based plugins that perform code obfuscation.☆126Updated 3 weeks ago
- A Rust crate for parsing Windows user minidumps.☆40Updated last year
- ☆43Updated 3 years ago
- A post-processing script for TinyTracer☆36Updated 2 years ago
- This x64dbg plugin allows you to upload your sample to Malcore and view the results.☆37Updated 2 years ago
- ☆145Updated last year
- rp-bf: A library to bruteforce ROP gadgets by emulating a Windows user-mode crash-dump☆116Updated last year
- Windows KASLR bypass using prefetch side-channel☆111Updated last year