Signal-Labs/IOCTLDump external links

---

GitHub - View repository

GitHub.dev - Open in online code editor

Star history - Growth chart over time

deps.dev - Dependencies and security vulnerabilities

Gitingest - Export source code for LLM usage

Repomix - Export source code for LLM usage

uithub - Export source code for LLM usage

Close

Signal-Labs/IOCTLDump

Readme badge preview -

If you own this repo, copy the snippet below and add it to your README.md

---

Copy

[![RelatedRepos](https://img.shields.io/badge/related-repos-yellow)](https://relatedrepos.com/gh/Signal-Labs/IOCTLDump)

Close

Signal-Labs / IOCTLDumpView on GitHubMore

• External links
• Readme badge

☆149Jun 5, 2023Updated 2 years ago

Alternatives and similar repositories for IOCTLDump

Users that are interested in IOCTLDump are comparing it to the libraries listed below

• VollRagm / PTView

  View on GitHub
  Browse Page Tables on Windows (Page Table Viewer)
  ☆234Apr 2, 2022Updated 3 years ago
• Signal-Labs / FileHook

  View on GitHub
  ☆30Oct 13, 2020Updated 5 years ago
• ioncodes / ceload

  View on GitHub
  BYOVD: Loading dbk64.sys and grabbing a handle to it
  ☆164Jun 8, 2022Updated 3 years ago
• commial / ttd-bindings

  View on GitHub
  Bindings for Microsoft WinDBG TTD
  ☆235Aug 5, 2023Updated 2 years ago
• VoidSec / DriverBuddyReloaded

  View on GitHub
  Driver Buddy Reloaded is an IDA Pro Python plugin that helps automate some tedious Windows Kernel Drivers reverse engineering tasks
  ☆412Jul 4, 2025Updated 7 months ago
• zodiacon / DbgPrint

  View on GitHub
  Debug Print viewer (user and kernel)
  ☆72Feb 7, 2024Updated 2 years ago
• vxcute / WindowsInternals

  View on GitHub
  Yet another windows internals repo
  ☆212Aug 29, 2021Updated 4 years ago
• airbus-cert / ttddbg

  View on GitHub
  Time Travel Debugging IDA plugin
  ☆592Jun 27, 2024Updated last year
• hugsy / CFB

  View on GitHub
  CFB is a ProcMon-style tool designed to assist capturing IRPs sent to Windows drivers.
  ☆333Mar 26, 2024Updated last year
• 0vercl0k / udmp-parser

  View on GitHub
  A Cross-Platform C++ parser library for Windows user minidumps with Python 3 bindings.
  ☆226Oct 3, 2025Updated 4 months ago
• Nero22k / Kernel-Programming-2023

  View on GitHub
  Repository of different kernel drivers written while studying Windows NT Driver development
  ☆12Apr 14, 2024Updated last year
• D4stiny / spectre

  View on GitHub
  A Windows kernel-mode rootkit that abuses legitimate communication channels to control a machine.
  ☆722Aug 5, 2020Updated 5 years ago
• ytk2128 / pe32-password

  View on GitHub
  A simple password-based PE encryptor for Windows 32-bit executables.
  ☆51Jan 9, 2025Updated last year
• waleedassar / SyscallNumberExtractor

  View on GitHub
  ☆24Sep 26, 2021Updated 4 years ago
• rad9800 / VehApiResolve

  View on GitHub
  ☆118Aug 7, 2022Updated 3 years ago
• lab52io / LeakedHandlesFinder

  View on GitHub
  Leaked Windows processes handles identification tool
  ☆291Mar 14, 2022Updated 3 years ago
• hasherezade / process_overwriting

  View on GitHub
  Yet another variant of Process Hollowing
  ☆458Jul 31, 2025Updated 7 months ago
• iPower / KasperskyHook

  View on GitHub
  Hook system calls on Windows by using Kaspersky's hypervisor
  ☆1,278Feb 14, 2026Updated 2 weeks ago
• commial / experiments

  View on GitHub
  Expriments
  ☆478Oct 3, 2024Updated last year
• joe-desimone / patriot

  View on GitHub
  ☆153Jul 31, 2022Updated 3 years ago
• mandiant / STrace

  View on GitHub
  A DTrace on Windows Reimplementation
  ☆369Feb 3, 2026Updated 3 weeks ago
• therealdreg / cgaty

  View on GitHub
  Hooking the GDT - Installing a Call Gate. POC for Rootkit Arsenal Book Second Edition (version 2022)
  ☆73Aug 11, 2023Updated 2 years ago
• KaLendsi / CVE-2021-43224-POC

  View on GitHub
  Windows Common Log File System Driver POC
  ☆95Dec 21, 2021Updated 4 years ago
• synacktiv / Windows-kernel-SegmentHeap-Aligned-Chunk-Confusion

  View on GitHub
  PoC exploiting Aligned Chunk Confusion on Windows kernel Segment Heap
  ☆215Jul 2, 2020Updated 5 years ago
• w1u0u1 / kinject

  View on GitHub
  Kernel shellcode injector
  ☆148Mar 23, 2021Updated 4 years ago
• mrexodia / AppInitHook

  View on GitHub
  Global user-mode hooking framework, based on AppInit_DLLs. The goal is to allow you to rapidly develop hooks to inject in an arbitrary pr…
  ☆182Mar 10, 2022Updated 3 years ago
• ioncodes / pooldump

  View on GitHub
  ☆31Jan 12, 2022Updated 4 years ago
• boku7 / injectEtwBypass

  View on GitHub
  CobaltStrike BOF - Inject ETW Bypass into Remote Process via Syscalls (HellsGate|HalosGate)
  ☆300Sep 28, 2021Updated 4 years ago
• hfiref0x / NtCall64

  View on GitHub
  Windows NT x64 syscall fuzzer
  ☆634Feb 19, 2026Updated last week
• waldo-irc / MalMemDetect

  View on GitHub
  Detect strange memory regions and DLLs
  ☆185Jan 20, 2022Updated 4 years ago
• omerk2511 / Sparta

  View on GitHub
  A virtualization-based endpoint security solution for Windows
  ☆88May 23, 2021Updated 4 years ago
• KelvinMsft / DeviceMon

  View on GitHub
  VT-based PCI device monitor (SPI)
  ☆158Oct 29, 2020Updated 5 years ago
• gdabah / win32k-bugs

  View on GitHub
  Dump of win32k POCs for bugs I've found
  ☆381Mar 6, 2022Updated 3 years ago
• airbus-cert / comida

  View on GitHub
  An IDA Plugin that help analyzing module that use COM
  ☆230Oct 10, 2025Updated 4 months ago
• SB-GC-Labs / hAFL1

  View on GitHub
  ☆137Aug 3, 2021Updated 4 years ago
• xct / windows-kernel-exploits

  View on GitHub
  Some of my windows kernel exploits for learning purposes
  ☆137May 18, 2022Updated 3 years ago
• FSecureLABS / win_driver_plugin

  View on GitHub
  A tool to help when dealing with Windows IOCTL codes or reversing Windows drivers.
  ☆437Aug 22, 2018Updated 7 years ago
• can1357 / NtRays

  View on GitHub
  Hex-Rays microcode plugin for automated simplification of Windows Kernel decompilation.
  ☆657Jan 28, 2025Updated last year
• waleedassar / RestrictedKernelLeaks

  View on GitHub
  ☆165Sep 18, 2021Updated 4 years ago