This project provides a collection of Microsoft Windows kernel structures, unions and enumerations. Most of them are not officially documented and cannot be found in Windows Driver Kit (WDK) headers. The target audience of this site is driver developers and kernel researches.
☆258Nov 2, 2025Updated 10 months ago
Alternatives and similar repositories for vergilius-project
Users that are interested in vergilius-project are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Windows kernel PDB data parsed into YAML☆44Nov 2, 2025Updated 10 months ago
- Exports monitoring plugin for x64dbg☆23Mar 14, 2023Updated 3 years ago
- Examples of leaking Kernel Mode information from User Mode on Windows☆644Jul 7, 2017Updated 9 years ago
- A copy of my Mathematics and Computer Engineering B.Sc. thesis☆18Dec 8, 2020Updated 5 years ago
- Native API header files for the System Informer project.☆1,478Mar 26, 2026Updated 5 months ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Browse Page Tables on Windows (Page Table Viewer)☆242Apr 2, 2022Updated 4 years ago
- Driver and WinDBG scripts to dump information about all resources and lookaside lists☆67Apr 4, 2020Updated 6 years ago
- Time Travel Debugging IDA plugin☆595Jun 27, 2024Updated 2 years ago
- Lightweight WINAPI tracing with Pin☆26Aug 22, 2019Updated 7 years ago
- Simple project that demonstrates how an ETW consumer can be created just by using NTDLL☆154Feb 23, 2019Updated 7 years ago
- Bindings for Microsoft WinDBG TTD☆243Aug 5, 2023Updated 3 years ago
- LLVM based devirtualization PoC’s.☆20Dec 11, 2021Updated 4 years ago
- Easy Anti PatchGuard☆218Apr 9, 2021Updated 5 years ago
- C++ Exceptions in Windows Drivers☆222Dec 21, 2020Updated 5 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- VirtualKD-Redux - A revival and modernization of VirtualKD☆985Jun 23, 2024Updated 2 years ago
- CFB is a ProcMon-style tool designed to assist capturing IRPs sent to Windows drivers.☆337Mar 26, 2024Updated 2 years ago
- Monitoring and controlling kernel API calls with stealth hook using EPT☆1,400Jan 22, 2022Updated 4 years ago
- Create and use macros in IDA's CLIs☆66Aug 15, 2026Updated last month
- IDA plugin and loader for UEFI firmware analysis and reverse engineering automation☆1,127Aug 20, 2026Updated last month
- A POC for Windows Extension Host hooking☆24Jul 13, 2019Updated 7 years ago
- Reverse engineered API for Microsoft's Time Travel Debugger☆35Apr 18, 2024Updated 2 years ago
- ☆19Jan 12, 2020Updated 6 years ago
- Hook system calls, context switches, page faults and more.☆2,680May 9, 2023Updated 3 years ago
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- Bring Your Own Vulnerable Driver for PatchGuard & Driver Signature Enforcement☆14Apr 6, 2024Updated 2 years ago
- Hide codes/data in the kernel address space.☆185May 8, 2021Updated 5 years ago
- Analyze Windows x64 Kernel Memory Layout☆134Nov 19, 2020Updated 5 years ago
- Defeating Patchguard universally for Windows 8, Windows 8.1 and all versions of Windows 10 regardless of HVCI.☆912Nov 21, 2019Updated 6 years ago
- Two PoC of accessing process virtual memory via NT Kernel☆21Jun 25, 2021Updated 5 years ago
- Bypasses for Windows kernel callbacks PatchGuard protection☆44Aug 15, 2021Updated 5 years ago
- INF Studio for easier working with driver installation files☆40Nov 11, 2023Updated 2 years ago
- Windows PDB parser for kernel-mode environment.☆116Jun 7, 2025Updated last year
- Simple Intel VT-x hypervisor☆375Dec 10, 2023Updated 2 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- HyperDeceit is the ultimate all-in-one library that emulates Hyper-V for Windows, giving you the ability to intercept and manipulate oper…☆382Jun 3, 2023Updated 3 years ago
- Detect strange memory regions and DLLs☆191Jan 20, 2022Updated 4 years ago
- A library to develop kernel level Windows payloads for post HVCI era☆533May 18, 2021Updated 5 years ago
- A DTrace on Windows Reimplementation☆379May 28, 2026Updated 3 months ago
- A free but powerful Windows kernel research tool.☆2,722Dec 14, 2025Updated 9 months ago
- Hook all callbacks which are registered with LdrRegisterDllNotification☆102Apr 3, 2025Updated last year
- Kernel Driver Utility☆2,730Aug 18, 2026Updated last month