Sinclairq / tp-emulator
A basic 100 loc CPU emulator using the existing code of ntoskrnl.exe
☆69Updated last year
Related projects ⓘ
Alternatives and complementary repositories for tp-emulator
- nmi stackwalking + module verification☆85Updated 10 months ago
- ☆70Updated 2 years ago
- Discarded Section Manual Map☆66Updated 4 years ago
- Windows PDB parser for kernel-mode environment.☆87Updated last year
- just proof of concept. hooking MmCopyMemory PG safe.☆62Updated 11 months ago
- Kernel ReClassEx☆62Updated 11 months ago
- A simple ida python script to find .data ptr☆46Updated last year
- unorthodox approach to analyze a trace, but this helped me get comfy with x64 instructions overall (excluding sse/avx/etc lol), cleared u…☆52Updated 9 months ago
- intel vt-x type 2 hypervisor☆48Updated 4 months ago
- Visual Studio Project example for using Microsoft's STL in WDM (Windows Kernel-mode Driver)☆23Updated 3 years ago
- A intel hypervisor, implementing many virtualization techniques☆37Updated last year
- detect hypervisor with Nmi Callback☆34Updated 2 years ago
- Kernel driver for detecting Intel VT-x hypervisors.☆170Updated last year
- Mapping your code on a 0x1000 size page☆69Updated 2 years ago
- A debugger library using VEH.☆41Updated 2 months ago
- Standard Kernel Library for Windows hacking in C++☆82Updated 2 months ago
- A basic demonstration of directly overwriting paging structures for physical memory r/w and interprocess memory copy☆77Updated last year
- a minimalistic windows hypervisor for amd processors☆98Updated 2 years ago
- Some psuedo snippets from BattlEye's BEDaisy.sys loaded on Rainbow Six: Siege.☆122Updated 2 years ago
- Shows an example of how to implement VT-d/AMD-Vi on Windows☆79Updated last year
- Handling C++ & __try exceptions without the need of built-in handlers.☆65Updated 3 years ago
- ☆78Updated 3 years ago
- ☆48Updated 2 years ago
- Custom KiSystemStartup, can be used to modificate kernel before boot.☆49Updated 2 years ago
- Intercepting DeviceControl via WPP☆127Updated 4 years ago
- 将驱动映射到会话空间☆32Updated 2 years ago
- Enable SEH support for manual mapped x86-32bit PEs☆65Updated 5 years ago
- Bypassing EasyAntiCheat.sys self-integrity by abusing call hierarchy☆78Updated 2 years ago