Alternatives and similar repositories for kmdf_re

Users that are interested in kmdf_re are comparing it to the libraries listed below

• bluefrostsecurity / Meltdown-KVA-Shadow-Leak
  ☆47Updated 5 years ago
• yardenshafir / MitigationFlagsCliTool
  Command like tool to print mitigation flags for running processes in a memory dump
  ☆47Updated 4 years ago
• jackullrich / Windows-API-Fuzzer
  Designed to learn OS specific anti-emulation patterns by fuzzing the Windows API.
  ☆99Updated 5 years ago
• vp777 / exploit-dev
  ☆11Updated 3 years ago
• BehroozAbbassi / VmwpMonitor
  ☆41Updated 4 years ago
• SinaKarvandi / windbg2ida
  Windbg2ida lets you dump each step in Windbg then shows these steps in IDA
  ☆74Updated last year
• 0vercl0k / lockmem
  This utility allows you to lock every available memory regions of an arbitrary process into its working set.
  ☆70Updated 2 years ago
• VoidSec / ioctlpus
  IOCTLpus can be used to make DeviceIoControl requests with arbitrary inputs (with functionality somewhat similar to Burp Repeater).
  ☆93Updated 3 years ago
• DownWithUp / DynamicKernelShellcode
  An example of how x64 kernel shellcode can dynamically find and use APIs
  ☆106Updated 5 years ago
• k0keoyo / ksRPC_analysis_script
  ☆12Updated 5 years ago
• Signal-Labs / IOCTLDump
  ☆147Updated 2 years ago
• ionescu007 / hazmat5
  Local OXID Resolver (LCLOR) : Research and Tooling
  ☆35Updated 4 years ago
• therealdreg / cgaty
  Hooking the GDT - Installing a Call Gate. POC for Rootkit Arsenal Book Second Edition (version 2022)
  ☆73Updated 2 years ago
• mathisvickie / CVE-2021-21551
  arbitrary kernel read/write in dbutil_2_3.sys, Proof of Concept Local Privilege Escalation to nt authority/system
  ☆57Updated 3 years ago
• airbus-cert / ttd2mdmp
  Extract data of TTD trace file to a minidump
  ☆30Updated 2 years ago
• 0vercl0k / kdmp-parser
  A Windows kernel dump C++ parser library with Python 3 bindings.
  ☆204Updated last year
• redplait / armpatched
  clone of armadillo patched for windows
  ☆47Updated 10 months ago
• waleedassar / RestrictedKernelLeaks
  ☆163Updated 3 years ago
• yrp604 / bdump
  ☆47Updated 2 years ago
• JaanusKaapPublic / BlogHyperV
  Tools made for my Hyper-V blog series @ https://foxhex0ne.blogspot.com/
  ☆57Updated 5 years ago
• yardenshafir / cet-research
  A collection of tools, source code, and papers researching Windows' implementation of CET.
  ☆85Updated 4 years ago
• claroty / ResearchTools
  ☆36Updated 4 years ago
• progmboy / win32kext
  windbg plugin for win32k debugging
  ☆75Updated 5 years ago
• jthuraisamy / ioctlpus
  ☆120Updated 4 years ago
• pwnlogs / d-time
  This repository contains D-TIME: Distributed Threadless Independent Malware Execution for Runtime Obfuscation.
  ☆37Updated 4 years ago
• D4stiny / ExceptionOrientedProgramming
  Abusing exceptions for code execution.
  ☆112Updated 2 years ago
• 0vercl0k / symbolizer
  A fast execution trace symbolizer for Windows.
  ☆131Updated last year
• 474172261 / Helpful-python-scripts
  A collection of my scripts for research
  ☆12Updated last month
• EliseZeroTwo / SEH-Helper
  Binary Ninja plugin for exploring Structured Exception Handlers
  ☆81Updated last year
• tinysec / rtypes
  A simple but useful project maybe help you reverse Windows.
  ☆39Updated last year