DownWithUp / KLoad_C
A simple command line utility to quickly load and unload Windows drivers
☆17Updated 2 years ago
Alternatives and similar repositories for KLoad_C:
Users that are interested in KLoad_C are comparing it to the libraries listed below
- Windbg2ida lets you dump each step in Windbg then shows these steps in IDA☆75Updated 9 months ago
- Sample project for kernel debugging automation with Vagrant☆59Updated 5 years ago
- ☆45Updated 4 years ago
- AMD SVM hypervisor rootkit proof of concept☆46Updated last year
- Retrieve pointers to undocumented kernel functions and offsets to members within undocumented structures to use in your driver by using t…☆54Updated 5 years ago
- Hooking the GDT - Installing a Call Gate. POC for Rootkit Arsenal Book Second Edition (version 2022)☆72Updated last year
- Tools made for my Hyper-V blog series @ https://foxhex0ne.blogspot.com/☆56Updated 4 years ago
- A fast execution trace symbolizer for Windows.☆130Updated 11 months ago
- SigMaker plugin for Binary Ninja☆9Updated 4 years ago
- Takes a Windbg dumped structure (using the 'dt' command) and formats it into a C structure☆35Updated 9 months ago
- Helper script for Windows kernel debugging with IDA Pro on VMware + GDB stub (including PDB symbols)☆63Updated last year
- Open Course for diving security internal☆51Updated 5 years ago
- Exploits pack for the Windows Kernel mode driver HackSysExtremeVulnerableDriver written for educational purposes.☆66Updated 3 years ago
- An example of how x64 kernel shellcode can dynamically find and use APIs☆105Updated 4 years ago
- This is a simple driver with x64 inline assembly☆54Updated 4 years ago
- This utility allows you to lock every available memory regions of an arbitrary process into its working set.☆67Updated last year
- Collection of obfuscation, tamper-proofing, and watermarking algorithms targeting LLVM IR.☆71Updated 5 years ago
- Master list of all my vulnerability discoveries. Mostly 3rd party kernel drivers.☆48Updated 4 years ago
- A code parser for C-Style header files that lets you to parse function's prototypes and data types used in their parameters.☆93Updated 3 years ago
- Simple DLL and client app that work together to hook all the functions in WinHvPlatform.dll in order to provide logging and introspection…☆15Updated 3 years ago
- clone of armadillo patched for windows☆47Updated 6 months ago
- An automatic tool for fixing dumped PE files☆41Updated 4 years ago
- Driver demonstrating how to register a DPC to asynchronously wait on an object☆49Updated 4 years ago
- ☆40Updated 3 years ago
- A simple and heavily documented series of test hypervisors built for 64-bit Windows 10 systems running under Intel's VT-x☆32Updated 4 years ago
- A collection of tools, source code, and papers researching Windows' implementation of CET.☆82Updated 4 years ago
- VMX intrinsics plugin for Hex-Rays decompiler☆70Updated 5 years ago
- A static analysis tool that helps security researchers scan a list of Windows kernel drivers for common vulnerability patterns in drivers…☆54Updated 3 years ago
- An API Monitor based on Instrumentation☆43Updated 7 years ago
- VTIL command line utility☆27Updated 3 years ago