Alternatives and similar repositories for Notes

Users that are interested in Notes are comparing it to the libraries listed below

• SinaKarvandi / x64-Driver-Inline-Assembly
  This is a simple driver with x64 inline assembly
  ☆55Updated 4 years ago
• ajkhoury / Windbg2Struct
  Takes a Windbg dumped structure (using the 'dt' command) and formats it into a C structure
  ☆35Updated 10 months ago
• yardenshafir / KernelDataStructureFinder
  Driver and WinDBG scripts to dump information about all resources and lookaside lists
  ☆67Updated 5 years ago
• SouhailHammou / KernelSymbolsHelper
  Retrieve pointers to undocumented kernel functions and offsets to members within undocumented structures to use in your driver by using t…
  ☆56Updated 5 years ago
• idkwim / frookSINATRA
  POC of sysenter x64 LSTAR MSR hook
  ☆39Updated 10 years ago
• progmboy / win32kext
  windbg plugin for win32k debugging
  ☆75Updated 5 years ago
• synacktiv / vmx_intrinsics
  VMX intrinsics plugin for Hex-Rays decompiler
  ☆71Updated 5 years ago
• yardenshafir / DpcWait
  Driver demonstrating how to register a DPC to asynchronously wait on an object
  ☆49Updated 4 years ago
• SinaKarvandi / windbg2ida
  Windbg2ida lets you dump each step in Windbg then shows these steps in IDA
  ☆75Updated 10 months ago
• dro / win10-ida-types
  Windows 10 kernel and ntdll internal types, directly compatible with ida.
  ☆50Updated 6 years ago
• MeeSong / Sunstrider
  Analyze PatchGuard
  ☆58Updated 6 years ago
• usualsuspect / ida_stuff
  ☆27Updated 6 years ago
• ajkhoury / Errata1337
  ☆68Updated 4 years ago
• JaanusKaapPublic / BlogHyperV
  Tools made for my Hyper-V blog series @ https://foxhex0ne.blogspot.com/
  ☆57Updated 4 years ago
• Cr4sh / PTBypass-PoC
  Bypassing code hooks detection in modern anti-rootkits via building faked PTE entries.
  ☆76Updated 14 years ago
• omerk2511 / NotifyRoutinesResearch
  A research project about Windows notify routines.
  ☆35Updated 4 years ago
• calware / HV-Playground
  A simple and heavily documented series of test hypervisors built for 64-bit Windows 10 systems running under Intel's VT-x
  ☆32Updated 4 years ago
• KelvinMsft / UsbMon
  ☆34Updated 4 years ago
• lldre / handle_exploration
  Figuring out the cause of a handle downgrade
  ☆24Updated 2 years ago
• DProvinciani / pt-detector
  Code-Reuse Exploits detection using Intel Processor Trace
  ☆28Updated 6 years ago
• POPFD / HypervisorBase
  A library for intel VT-x hypervisor functionality supporting EPT shadowing.
  ☆49Updated 4 years ago
• tandasat / ia32-doc
  IA32-doc is a project which aims to put as many definitions from the Intel Manual into machine-processable format as possible
  ☆16Updated 3 years ago
• redplait / armpatched
  clone of armadillo patched for windows
  ☆47Updated 6 months ago
• tandasat / EopMon
  Elevation of privilege detector based on HyperPlatform
  ☆121Updated 8 years ago
• archercreat / vdk
  vdk is a set of utilities used to help with exploitation of a vulnerable driver.
  ☆39Updated 2 years ago
• KelvinMsft / DeviceMon
  VT-based PCI device monitor (SPI)
  ☆151Updated 4 years ago
• IgorKorkin / HypervisorsDetection
  This is the first software system, which can detect a stealthy hypervisor and calculate several nested ones even under countermeasures.
  ☆85Updated 9 years ago
• bluefrostsecurity / Meltdown-KVA-Shadow-Leak
  ☆45Updated 4 years ago
• vtil-project / VTIL-BinaryNinja
  ☆91Updated 4 years ago
• BreakingMalwareResearch / CFGExceptions
  Adding exceptions to Microsoft's Control Flow Guard (CFG)
  ☆58Updated 8 years ago