a demo for x86/x64's paging memory management learning, convert a virtual address from ring3 to physical address in ring0
☆19Aug 26, 2017Updated 8 years ago
Alternatives and similar repositories for VAToPA
Users that are interested in VAToPA are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- ☆14Oct 5, 2019Updated 6 years ago
- Example of making debugger using Hardware Breakpoint + VEH☆18May 13, 2021Updated 4 years ago
- Detects if a Kernel mode debugger is active by reading the value of KUSER_SHARED_DATA.KdDebuggerEnabled. It is a high level and portable …☆23Sep 18, 2017Updated 8 years ago
- Simple Demo of using Windows Hypervisor Platform☆29Jul 14, 2025Updated 8 months ago
- WIP python3 plugin for x64dbg☆16Mar 31, 2021Updated 4 years ago
- R3劫持所有异常☆15Jan 4, 2021Updated 5 years ago
- x64dbg plugin template for visual studio☆21Jan 24, 2019Updated 7 years ago
- A reflexive driver loader to bypass Windows DSE (featuring a custom PE loader)☆44Sep 1, 2018Updated 7 years ago
- Easily hook WIN32 x64 functions☆18Feb 19, 2025Updated last year
- TLS Examples in Schannel and IO Completion Ports☆10Jun 21, 2022Updated 3 years ago
- PoC of BOOST-ed _EPROCESS.VadRoot iterating☆27May 21, 2014Updated 11 years ago
- VEH Redirect & VEH Debugger☆23May 18, 2020Updated 5 years ago
- OD反汇编引擎精简版，只适合x86系统，可嵌入驱动程序。☆10Mar 29, 2018Updated 7 years ago
- 一些研究☆14Dec 18, 2019Updated 6 years ago
- the basic version of the ring0 physical memory read/write tool☆92Aug 18, 2019Updated 6 years ago
- Monitor ETW events for Windows process mitigation policies, with stack traces☆31Oct 7, 2022Updated 3 years ago
- ☆28Nov 20, 2017Updated 8 years ago
- Example of hijacking system calls via function pointer tables☆31Jun 26, 2021Updated 4 years ago
- Implementation of a dispatcher for Structured Exceptions inside a Vectored Exception Handler☆42Feb 15, 2020Updated 6 years ago
- 正确解析 _HEAP_VS_***符号 ,支持在最新win11 24h2 运行,替换windbg自带的!pool命令☆17Nov 30, 2024Updated last year
- Flask Permission Management Extension☆11Jul 29, 2021Updated 4 years ago
- a tool for analysing and reversing x64 at&t disassembly☆12Dec 30, 2021Updated 4 years ago
- ☆24May 17, 2022Updated 3 years ago
- NASM listing to shellcode converter☆14May 6, 2018Updated 7 years ago
- Detect removed thread from PspCidTable.☆75Mar 18, 2022Updated 4 years ago
- ☆61Aug 21, 2023Updated 2 years ago
- Assembly code to use for Windows kernel shellcode to edit winlogon.exe ACL☆13Mar 6, 2017Updated 9 years ago
- Open Course for diving security internal☆52Nov 11, 2019Updated 6 years ago
- Windows system spy for Mouse, Keyboard and Gamepad(Joystick).☆15Jul 6, 2022Updated 3 years ago
- https://key08.com/index.php/2021/10/19/1375.html☆71May 11, 2022Updated 3 years ago
- 对debughelp的二次开发☆11Feb 20, 2023Updated 3 years ago
- detect hypervisor with Nmi Callback☆42Sep 25, 2022Updated 3 years ago
- Kernel Shellcode to add all privileges in token☆15Mar 13, 2017Updated 9 years ago
- 新的注入方式☆11Sep 30, 2018Updated 7 years ago
- Slide of my conference presentations☆14Sep 5, 2024Updated last year
- An application to view and filter pool allocations from a dmp file on Windows 10 RS5+.☆151Mar 2, 2023Updated 3 years ago
- Window Executable file Function tracer using Debugging API☆44Sep 26, 2019Updated 6 years ago
- Windows file system driver which allows to block access to files at run-time (C/C++, C#, WDK, SDK)☆13Jan 1, 2023Updated 3 years ago
- Some drivers I've written while solving exercises from Practical Reverse Engineering☆15Jan 9, 2022Updated 4 years ago