DownWithUp / KLoad_C
A simple command line utility to quickly load and unload Windows drivers
☆17Updated 2 years ago
Alternatives and similar repositories for KLoad_C:
Users that are interested in KLoad_C are comparing it to the libraries listed below
- Retrieve pointers to undocumented kernel functions and offsets to members within undocumented structures to use in your driver by using t…☆53Updated 5 years ago
- ☆45Updated 4 years ago
- AMD SVM hypervisor rootkit proof of concept☆44Updated last year
- Windbg2ida lets you dump each step in Windbg then shows these steps in IDA☆75Updated 6 months ago
- This is a simple driver with x64 inline assembly☆54Updated 4 years ago
- Helper script for Windows kernel debugging with IDA Pro on VMware + GDB stub (including PDB symbols)☆62Updated last year
- Exploits pack for the Windows Kernel mode driver HackSysExtremeVulnerableDriver written for educational purposes.☆65Updated 3 years ago
- Collection of obfuscation, tamper-proofing, and watermarking algorithms targeting LLVM IR.☆71Updated 5 years ago
- vdk is a set of utilities used to help with exploitation of a vulnerable driver.☆39Updated 2 years ago
- Hooking the GDT - Installing a Call Gate. POC for Rootkit Arsenal Book Second Edition (version 2022)☆69Updated last year
- An example of how x64 kernel shellcode can dynamically find and use APIs☆104Updated 4 years ago
- A years-old exploit of a local EoP vulnerability in Kingsoft Antivirus KWatch Driver version 2009.3.17.77.☆36Updated 2 years ago
- Sample project for kernel debugging automation with Vagrant☆59Updated 4 years ago
- Open Course for diving security internal☆51Updated 5 years ago
- A collection of tools, source code, and papers researching Windows' implementation of CET.☆79Updated 4 years ago
- An automatic tool for fixing dumped PE files☆41Updated 4 years ago
- clone of armadillo patched for windows☆48Updated 3 months ago
- Binary Ninja plugin that can be used to apply Triton's dead store eliminitation pass on basic blocks or functions.☆58Updated 6 months ago
- A fast execution trace symbolizer for Windows.☆130Updated 8 months ago
- Windbg extension that allows you analyze Control Flow Guard map☆36Updated 3 years ago
- This utility allows you to lock every available memory regions of an arbitrary process into its working set.☆67Updated last year
- SigMaker plugin for Binary Ninja☆9Updated 4 years ago
- VMX intrinsics plugin for Hex-Rays decompiler☆70Updated 5 years ago
- devirtualization vmprotect☆61Updated last year
- ☆29Updated 3 years ago
- The sample DXE runtime driver demonstrating how to program DMA remapping.☆60Updated last year
- A IDA plugin to enable linking to locations in an IDB with a disas:// URI☆32Updated last year
- Tools made for my Hyper-V blog series @ https://foxhex0ne.blogspot.com/☆55Updated 4 years ago
- ☆67Updated 4 years ago
- Driver demonstrating how to register a DPC to asynchronously wait on an object☆49Updated 4 years ago