Writing WDF Drivers I: Core Concepts Lab Material
☆53Feb 24, 2026Updated 3 weeks ago
Alternatives and similar repositories for WDF-I
Users that are interested in WDF-I are comparing it to the libraries listed below
Sorting:
- Simple driver to register all available process, thread, image, Registry, and Object callbacks☆124Oct 5, 2017Updated 8 years ago
- penter hook example and driver time recorder☆33Oct 2, 2017Updated 8 years ago
- Demonstrate the new FileDispositionInfoEx behavior☆15Nov 6, 2017Updated 8 years ago
- ☆25May 21, 2021Updated 4 years ago
- Simple utility to watch directory change notifications on a given path☆20Oct 6, 2017Updated 8 years ago
- INF Studio for easier working with driver installation files☆39Nov 11, 2023Updated 2 years ago
- Demonstrate the behavior of the tunnel cache on Windows☆11Aug 13, 2019Updated 6 years ago
- A simple DLL that can intercept HID messages and pass them on to the real HID DLL, while logging the data.☆23Oct 3, 2014Updated 11 years ago
- A tool for Windows that can make any program work within file-system transactions.☆59Nov 12, 2020Updated 5 years ago
- Basic experimentation with Windows drivers.☆17Mar 3, 2023Updated 3 years ago
- An example of how x64 kernel shellcode can dynamically find and use APIs☆104May 14, 2020Updated 5 years ago
- Simple Demo of using Windows Hypervisor Platform☆29Jul 14, 2025Updated 8 months ago
- Try to transport the tcpip stack of ReactOS to Windows XP.☆17Feb 27, 2014Updated 12 years ago
- Windbg extension that allows you analyze Control Flow Guard map☆38Oct 7, 2021Updated 4 years ago
- PoC of BOOST-ed _EPROCESS.VadRoot iterating☆27May 21, 2014Updated 11 years ago
- Kernel Pool Monitor☆128Mar 6, 2022Updated 4 years ago
- ☆17Oct 31, 2022Updated 3 years ago
- Some research on AltSystemCallHandlers functionality in Windows 10 20H1 18999☆241Nov 6, 2019Updated 6 years ago
- 新的注入方式☆11Sep 30, 2018Updated 7 years ago
- Helper scripts for windows debugging with symbols for Bochs and IDA Pro (PDB files). Very handy for user mode <--> kernel mode☆19Aug 11, 2023Updated 2 years ago
- Kernel-mode file scanner☆19Jul 16, 2018Updated 7 years ago
- An application to view and filter pool allocations from a dmp file on Windows 10 RS5+.☆151Mar 2, 2023Updated 3 years ago
- ☆33Sep 24, 2021Updated 4 years ago
- A driver that hooks C: volume using symbolic link callback to track all FS access to the volume☆109Apr 24, 2020Updated 5 years ago
- Code to make it easier to write an NDIS network driver on Windows☆93Oct 1, 2023Updated 2 years ago
- Various WinDbg extensions and scripts☆33Sep 13, 2018Updated 7 years ago
- Zydis Python Bindings (Work In Progress)☆32Dec 20, 2021Updated 4 years ago
- A command tree based on commands and extensions for Windows Kernel Debugging.☆112Jul 10, 2020Updated 5 years ago
- A stack and register based virtual machine which can compile and execute arbitrary code in runtime☆45Mar 13, 2025Updated last year
- Diff plugin for x64dbg☆30Dec 14, 2020Updated 5 years ago
- ☆14Aug 15, 2018Updated 7 years ago
- Reverse engineered source code of the autochk rootkit☆210Nov 1, 2019Updated 6 years ago
- Retrieve pointers to undocumented kernel functions and offsets to members within undocumented structures to use in your driver by using t…☆65Jun 19, 2019Updated 6 years ago
- Command like tool to print mitigation flags for running processes in a memory dump☆47Sep 18, 2020Updated 5 years ago
- Simple command line version of Sysinternals WinObj. Currently just lists object names and types given an object manager directory.☆22Sep 4, 2023Updated 2 years ago
- ☆36Oct 29, 2020Updated 5 years ago
- Demo to show how write ALPC Client & Server using native Ntdll.dll syscalls.☆21Jan 25, 2022Updated 4 years ago
- Driver demonstrating how to register a DPC to asynchronously wait on an object☆50Jan 15, 2021Updated 5 years ago
- A process overwriting its own PEB to make an illusion that it has been loaded from a different path.☆99Jun 24, 2021Updated 4 years ago