Cr4sh / s6_pcie_microblaze
PCI Express DIY hacking toolkit for Xilinx SP605. This repository is also home of Hyper-V Backdoor and Boot Backdoor, check readme for links and info
☆742Updated 6 months ago
Related projects ⓘ
Alternatives and complementary repositories for s6_pcie_microblaze
- A small bootkit which does not rely on x64 assembly.☆439Updated 5 years ago
- LeechCore - Physical Memory Acquisition Library & The LeechAgent Remote Memory Acquisition Agent☆523Updated last month
- "Screwed Drivers" centralized information source for code references, links, etc.☆339Updated 4 years ago
- IDA plugin for UEFI firmware analysis and reverse engineering automation☆909Updated 2 weeks ago
- Monitoring and controlling kernel API calls with stealth hook using EPT☆1,167Updated 2 years ago
- My implementation of enSilo's Process Doppelganging (PE injection technique)☆580Updated 2 years ago
- Windows NT x64 syscall fuzzer☆589Updated last year
- Canadian Furious Beaver is a ProcMon-style tool designed only for capturing IRPs sent to any Windows driver.☆310Updated 7 months ago
- RpcView is a free tool to explore and decompile Microsoft RPC interfaces☆928Updated last year
- Obfuscate specific windows apis with different apis☆982Updated 3 years ago
- A tool for UEFI firmware reverse engineering☆330Updated last year
- PCIe Screamer - TLPs experiments...☆164Updated last year
- Simple x86-64 VT-x Hypervisor with EPT Hooking☆846Updated last year
- The research UEFI hypervisor that supports booting an operating system.☆552Updated 3 months ago
- Defeating Patchguard universally for Windows 8, Windows 8.1 and all versions of Windows 10 regardless of HVCI.☆845Updated 5 years ago
- Minimalistic VT-x hypervisor with hooks☆823Updated 5 years ago
- Virtual Machine Introspection, Tracing & Debugging☆558Updated 2 years ago
- proof-of-concept Windows Driver for injecting DLL into user-mode processes using APC☆1,140Updated 6 months ago
- Internals information about Hyper-V☆661Updated 2 months ago
- A Pin Tool for tracing API calls etc☆1,303Updated this week
- VivienneVMM is a stealthy debugging framework implemented via an Intel VT-x hypervisor.☆782Updated 4 years ago
- DriverBuddy is an IDA Python script to assist with the reverse engineering of Windows kernel drivers.☆352Updated 4 years ago
- Examples of leaking Kernel Mode information from User Mode on Windows☆581Updated 7 years ago
- Intel VT-x based hypervisor aiming to provide a thin VM-exit filtering platform on Windows.☆1,538Updated 11 months ago
- A library to load, manipulate, dump PE files. See also: https://github.com/hasherezade/libpeconv_tpl☆1,117Updated 2 weeks ago
- My notes while studying Windows internals☆399Updated this week
- Extract Windows Defender database from vdm files and unpack it☆425Updated 4 years ago
- Pinjectra is a C/C++ OOP-like library that implements Process Injection techniques (with focus on Windows 10 64-bit)☆792Updated 2 years ago
- WinDBG Anti-RootKit Extension☆615Updated 4 years ago
- Hook system calls on Windows by using Kaspersky's hypervisor☆1,115Updated 7 months ago