VergiliusProject / vergilius-project
This project provides a collection of Microsoft Windows kernel structures, unions and enumerations. Most of them are not officially documented and cannot be found in Windows Driver Kit (WDK) headers. The target audience of this site is driver developers and kernel researches.
☆173Updated 7 months ago
Alternatives and similar repositories for vergilius-project:
Users that are interested in vergilius-project are comparing it to the libraries listed below
- ShowStopper is a tool for helping malware researchers explore and test anti-debug techniques or verify debugger plugins or other solution…☆197Updated 2 years ago
- Research on Windows Kernel Executive Callback Objects☆282Updated 4 years ago
- APC Internals Research Code☆161Updated 4 years ago
- A library to develop kernel level Windows payloads for post HVCI era☆380Updated 3 years ago
- Some research on AltSystemCallHandlers functionality in Windows 10 20H1 18999☆212Updated 5 years ago
- A more stealthy variant of "DLL hollowing"☆339Updated 10 months ago
- IDA Pro plugin to make bitfield accesses easier to grep☆230Updated 9 months ago
- MemoryRanger protects kernel data and code by running drivers and hosting data in isolated kernel enclaves using VT-x and EPT features. M…☆220Updated 4 years ago
- Code Injection, Inject malicious payload via pagetables pml4.☆230Updated 3 years ago
- Debugger Anti-Detection Benchmark☆302Updated last year
- Hex-Rays microcode plugin for automated simplification of Windows Kernel decompilation.☆568Updated 3 weeks ago
- Set of antianalysis techniques found in malware☆129Updated last year
- Driver Buddy Reloaded is an IDA Pro Python plugin that helps automate some tedious Windows Kernel Drivers reverse engineering tasks☆337Updated 2 months ago
- Executes 64bit code from a 32bit process☆232Updated 7 years ago
- Yet another windows internals repo☆205Updated 3 years ago
- Basic Windows Kernel Programming☆124Updated 4 years ago
- Bindings for Microsoft WinDBG TTD☆217Updated last year
- BYOVD: Loading dbk64.sys and grabbing a handle to it☆149Updated 2 years ago
- ☆153Updated 3 months ago
- ☆158Updated 3 years ago
- A modern c++ implementation of windows heavens gate☆202Updated 4 years ago
- An IDA Plugin that help analyzing module that use COM☆200Updated last year
- Header only wrapper around Hex-Rays API in C++20.☆154Updated 3 weeks ago
- API Set resolver for Windows☆122Updated 4 months ago
- Analyze patches in a process☆248Updated 3 years ago
- Browse Page Tables on Windows (Page Table Viewer)☆194Updated 2 years ago
- x64 Windows PatchGuard bypass, register process-creation callbacks from unsigned code☆199Updated 3 years ago
- A list of excellent resources for anyone to deepen their understanding with regards to Windows Kernel Exploitation and general low level …☆132Updated 2 years ago
- This is a collection of interesting codes about Windows Process creation.☆232Updated last year
- Simple windows API logger☆98Updated 5 years ago