Windows PDB parser for kernel-mode environment.
☆110Jun 7, 2025Updated 8 months ago
Alternatives and similar repositories for KPDB
Users that are interested in KPDB are comparing it to the libraries listed below
Sorting:
- A simple example how to decrypt kernel debugger data block☆32Feb 8, 2021Updated 5 years ago
- Lightweight WINAPI tracing with Pin☆27Aug 22, 2019Updated 6 years ago
- query-pdb is a server-side software for parsing PDB files. The software provides PDB online parsing service.☆168Oct 27, 2025Updated 4 months ago
- Easy Anti PatchGuard☆223Apr 9, 2021Updated 4 years ago
- Kernel driver for detecting Intel VT-x hypervisors.☆197Jul 11, 2023Updated 2 years ago
- kernel driver used to monitor the activity of BadlionAnticheat.sys by patching its IAT☆32Jul 9, 2021Updated 4 years ago
- Dont Call Me Back - Dynamic kernel callback resolver. Scan kernel callbacks in your system in a matter of seconds!☆249Jul 9, 2024Updated last year
- ☆223Mar 11, 2023Updated 2 years ago
- VMProtect, VMP, Devirter, 3,5☆112Jan 30, 2023Updated 3 years ago
- Lightweight Intel VT-x Hypervisor.☆663Dec 17, 2024Updated last year
- C++ Exceptions in Windows Drivers☆221Dec 21, 2020Updated 5 years ago
- LLVM Without The ROP Gadgets!☆25Jan 9, 2024Updated 2 years ago
- Simple Intel VT-x hypervisor☆360Dec 10, 2023Updated 2 years ago
- Type 2 Hypervisor for security research supported by AMD-V hardware assisted virtualization☆41Jan 9, 2023Updated 3 years ago
- ☆47Feb 3, 2025Updated last year
- Using Microsoft Warbird to automatically unpack and execute encrypted shellcode in ClipSp.sys without triggering PatchGuard☆269Aug 31, 2022Updated 3 years ago
- A library for intel VT-x hypervisor functionality supporting EPT shadowing.☆51Mar 11, 2021Updated 4 years ago
- Bypassing PatchGuard on modern x64 systems☆265Apr 9, 2023Updated 2 years ago
- The Kernel-Mode Winsock library, supporting TCP, UDP and Unix sockets (DGRAM and STREAM).☆288Jan 27, 2025Updated last year
- FastSymApi - A Fast API PDB Symbol Cache Server that efficiently caches and compresses PDBs on disk for quick and repeated retrieval.☆19Feb 12, 2026Updated 3 weeks ago
- RISC-V Disassembler☆18Aug 25, 2020Updated 5 years ago
- Monitor ETW events for Windows process mitigation policies, with stack traces☆31Oct 7, 2022Updated 3 years ago
- Hooking Windows' exception dispatcher to protect process's PML4☆228Jan 24, 2025Updated last year
- Windows Anti-Rootkit Tool☆546Dec 31, 2025Updated 2 months ago
- Application Verifier Dynamic Fault Injection☆40Jan 12, 2026Updated last month
- Emulate Drivers in RING3 with self context mapping or unicorn☆365Aug 18, 2022Updated 3 years ago
- Inject dll to process in driver☆10Aug 27, 2024Updated last year
- Collection of undocumented Windows API declarations.☆343Jan 22, 2026Updated last month
- Drawing from kernelmode without any hooks☆174Jul 7, 2022Updated 3 years ago
- HyperDeceit is the ultimate all-in-one library that emulates Hyper-V for Windows, giving you the ability to intercept and manipulate oper…☆379Jun 3, 2023Updated 2 years ago
- A simple x86_64 AMD-v hypervisor type-2 Programmed with C++, with soon to be added syscall hooks. [W.I.P]☆104Aug 3, 2023Updated 2 years ago
- A demonstration of hooking into the VMProtect-2 virtual machine☆24Nov 9, 2023Updated 2 years ago
- ☆47Nov 26, 2020Updated 5 years ago
- ☆37Sep 26, 2024Updated last year
- For Example. See Miro's Blog☆30Nov 26, 2022Updated 3 years ago
- ☆41Mar 23, 2023Updated 2 years ago
- a Windows kernel Pdb parsing and downloading library that running purely in kernel mode without any R3 programs.☆176Sep 13, 2024Updated last year
- Windows X64 mode use seh in manual mapped dll or manual mapped sys☆80Oct 10, 2022Updated 3 years ago
- The program draws with win32k gdi functions in the kernel while NtGdiDdDDISubmitCommand is being hooked.☆345Apr 27, 2020Updated 5 years ago