SinaKarvandi / x64-Driver-Inline-Assembly

Related projects: ⓘ

• ajkhoury / Windbg2Struct
  Takes a Windbg dumped structure (using the 'dt' command) and formats it into a C structure
  ☆33Updated 2 months ago
• SouhailHammou / KernelSymbolsHelper
  Retrieve pointers to undocumented kernel functions and offsets to members within undocumented structures to use in your driver by using t…
  ☆52Updated 5 years ago
• bluefrostsecurity / Meltdown-KVA-Shadow-Leak
  ☆44Updated 4 years ago
• BreakingMalwareResearch / CFGExceptions
  Adding exceptions to Microsoft's Control Flow Guard (CFG)
  ☆58Updated 8 years ago
• mq1n / VDM
  ☆16Updated this week
• Microwave89 / drvtricks
  drvtriks kernel driver for Windows 7 SP1 and 8.1 x64, that tricks around in your system.
  ☆31Updated 6 years ago
• yardenshafir / KernelDataStructureFinder
  Driver and WinDBG scripts to dump information about all resources and lookaside lists
  ☆63Updated 4 years ago
• Cr4sh / PTBypass-PoC
  Bypassing code hooks detection in modern anti-rootkits via building faked PTE entries.
  ☆72Updated 13 years ago
• JKornev / cfgdump
  Windbg extension that allows you analyze Control Flow Guard map
  ☆34Updated 2 years ago
• dro / uac-launchinf-poc
  Windows 10 UAC bypass PoC using LaunchInfSection
  ☆34Updated 6 years ago
• JaanusKaapPublic / BlogHyperV
  Tools made for my Hyper-V blog series @ https://foxhex0ne.blogspot.com/
  ☆53Updated 4 years ago
• fdiskyou / CVE-2018-19320
  ☆23Updated this week
• MeeSong / Sunstrider
  Analyze PatchGuard
  ☆53Updated 6 years ago
• lldre / handle_exploration
  Figuring out the cause of a handle downgrade
  ☆24Updated last year
• Barakat / windows.sandbox
  Windows sandbox PoC
  ☆29Updated 4 years ago
• yuvatia / Win10GdiExploitation
  Exploiting HEVD's WriteWhatWhereIoctlDispatch for LPE on Windows 10 TH2 through RS3 using GDI objects.
  ☆24Updated 6 years ago
• danielplohmann / empty_msvc
  A collection of empty MSVC projects, compiled using various versions and configurations of Visual Studio.
  ☆30Updated 2 months ago
• 1ce0ear / DllLoaderUnpacker
  ☆30Updated this week
• omerk2511 / NotifyRoutinesResearch
  A research project about Windows notify routines.
  ☆34Updated 4 years ago
• tandasat / RemoteWriteMonitor
  A tool to help malware analysts tell that the sample is injecting code into other process.
  ☆73Updated 9 years ago
• SinaKarvandi / Pinitor
  An API Monitor based on Instrumentation
  ☆40Updated 6 years ago
• redplait / armpatched
  clone of armadillo patched for windows
  ☆45Updated 5 months ago
• dro / win10-ida-types
  Windows 10 kernel and ntdll internal types, directly compatible with ida.
  ☆50Updated 5 years ago
• SamLarenN / PSC-Engine
  Polymorphic Stub Creator
  ☆30Updated 7 years ago
• yardenshafir / DpcWait
  Driver demonstrating how to register a DPC to asynchronously wait on an object
  ☆45Updated 3 years ago
• saweol / vwaad
  IDA script for vmprotect Windows Api address decoder
  ☆51Updated 3 years ago
• zwclose / veeamon
  ☆16Updated 4 years ago
• cxxrev0to1dev / nb_obfuscator
  win32/x64 obfuscate framework
  ☆32Updated 5 years ago
• MortenSchenk / tagWnd-Hardening-Bypass
  Bypass for the hardening against usage of tagWnd as a kernel read/write primitive
  ☆25Updated 7 years ago
• Fyyre / directntapi
  DirectNtApi - simple method to make ntapi function call without importing or walking export table. Work under Windows 7, 8 and 10
  ☆49Updated 6 months ago