ColinFinck / nt-load-orderLinks
A Rust library along with a Win32 GUI application to determine the driver load order of a Windows system (cf. https://colinfinck.de/posts/nt-load-order-part-1/)
☆11Updated 7 months ago
Alternatives and similar repositories for nt-load-order
Users that are interested in nt-load-order are comparing it to the libraries listed below
Sorting:
- IDA plugin to recover source code from panic information on rust☆17Updated 3 months ago
- LLDB based debugger for Linux Kernel☆26Updated 4 months ago
- Report and exploit of CVE-2024-21305.☆36Updated last year
- An x64dbg plugin which helps make sense of long C++ symbols☆59Updated 2 years ago
- Windows Minidump loader for Ghidra☆29Updated 2 years ago
- Rule Engine for Dynamic Malware Analysis and Research☆25Updated 4 months ago
- Generate a PDB file given the old PDB file and an address mapping☆49Updated last month
- dynamic binary instrumentation, analysis, and patching framework☆93Updated this week
- Different tools for Microsoft Hyper-V researching☆60Updated last month
- A Binary Ninja plugin to detect Themida, WinLicense and Code Virtualizer's obfuscated code locations.☆82Updated last year
- An x64dbg plugin which marks XFG call signatures as data☆77Updated 2 years ago
- PDB Rewriting Rust Library☆25Updated last year
- Yet another LLVM-based obfuscator☆118Updated last year
- LLVM based obfuscation engine☆99Updated 2 months ago
- WinDbg-ext-MCP bridges your favorite LLM client (like Cursor, Claude, or VS Code) with WinDbg, enabling real-time, AI assisted kernel deb…☆36Updated 2 months ago
- Plugin interface for remote communications with Binary Ninja database and MCP server for interfacing with LLMs.☆42Updated 3 months ago
- ANY.RUN sandbox detection collection☆21Updated last year
- genpatch is IDA plugin that generates a python script for patching binary☆36Updated last year
- A minimalistic logger for Windows Kernel Drivers.☆24Updated last year
- PEIM (UEFI) bootkit targeting OVMF (EDK2)☆36Updated last year
- A VMWare logger using built-in backdoor.☆30Updated 10 months ago
- Windows kernel driver template for cmkr and llvm-msvc.☆35Updated last year
- This IDA plugin extends the functionality of the assembly and hex view. With this plugin, you can conveniently decode/decrypt/alter data …☆84Updated 3 months ago
- ☆20Updated 6 months ago
- A set of LLVM and GCC based plugins that perform code obfuscation.☆128Updated 2 months ago
- Bump your ida python script automatically!☆29Updated 4 months ago
- monitors hidden syscalls called from call of duty anticheat☆83Updated 7 months ago
- Research-focused hypervisor offering advanced tools for debugging, virtual machine introspection, and automation.☆38Updated last week
- This repository contains an IDA processor for loading and disassembling compiled yara rules.☆42Updated 8 months ago
- Playing with LLVM passes☆37Updated 2 years ago