This project provides a collection of Microsoft Windows kernel structures, unions and enumerations. Most of them are not officially documented and cannot be found in Windows Driver Kit (WDK) headers. The target audience of this site is driver developers and kernel researches.
☆253Nov 2, 2025Updated 8 months ago
Alternatives and similar repositories for vergilius-project
Users that are interested in vergilius-project are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Windows kernel PDB data parsed into YAML☆44Nov 2, 2025Updated 8 months ago
- Exports monitoring plugin for x64dbg☆22Mar 14, 2023Updated 3 years ago
- Examples of leaking Kernel Mode information from User Mode on Windows☆645Jul 7, 2017Updated 9 years ago
- A copy of my Mathematics and Computer Engineering B.Sc. thesis☆19Dec 8, 2020Updated 5 years ago
- Native API header files for the System Informer project.☆1,442Mar 26, 2026Updated 3 months ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Browse Page Tables on Windows (Page Table Viewer)☆239Apr 2, 2022Updated 4 years ago
- Driver and WinDBG scripts to dump information about all resources and lookaside lists☆67Apr 4, 2020Updated 6 years ago
- Time Travel Debugging IDA plugin☆597Jun 27, 2024Updated 2 years ago
- Lightweight WINAPI tracing with Pin☆26Aug 22, 2019Updated 6 years ago
- Simple project that demonstrates how an ETW consumer can be created just by using NTDLL☆153Feb 23, 2019Updated 7 years ago
- Bindings for Microsoft WinDBG TTD☆242Aug 5, 2023Updated 2 years ago
- LLVM based devirtualization PoC’s.☆20Dec 11, 2021Updated 4 years ago
- Easy Anti PatchGuard☆219Apr 9, 2021Updated 5 years ago
- C++ Exceptions in Windows Drivers☆220Dec 21, 2020Updated 5 years ago
- Deploy open-source AI quickly and easily - Special Bonus Offer • AdRunpod Hub is built for open source. One-click deployment and autoscaling endpoints without provisioning your own infrastructure.
- VirtualKD-Redux - A revival and modernization of VirtualKD☆978Jun 23, 2024Updated 2 years ago
- CFB is a ProcMon-style tool designed to assist capturing IRPs sent to Windows drivers.☆334Mar 26, 2024Updated 2 years ago
- Monitoring and controlling kernel API calls with stealth hook using EPT☆1,400Jan 22, 2022Updated 4 years ago
- Create and use macros in IDA's CLIs☆66Dec 26, 2025Updated 6 months ago
- IDA plugin and loader for UEFI firmware analysis and reverse engineering automation☆1,114May 6, 2026Updated 2 months ago
- A POC for Windows Extension Host hooking☆24Jul 13, 2019Updated 7 years ago
- Reverse engineered API for Microsoft's Time Travel Debugger☆35Apr 18, 2024Updated 2 years ago
- ☆19Jan 12, 2020Updated 6 years ago
- Hook system calls, context switches, page faults and more.☆2,660May 9, 2023Updated 3 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Bring Your Own Vulnerable Driver for PatchGuard & Driver Signature Enforcement☆16Apr 6, 2024Updated 2 years ago
- Hide codes/data in the kernel address space.☆185May 8, 2021Updated 5 years ago
- Analyze Windows x64 Kernel Memory Layout☆133Nov 19, 2020Updated 5 years ago
- Defeating Patchguard universally for Windows 8, Windows 8.1 and all versions of Windows 10 regardless of HVCI.☆911Nov 21, 2019Updated 6 years ago
- Two PoC of accessing process virtual memory via NT Kernel☆21Jun 25, 2021Updated 5 years ago
- Bypasses for Windows kernel callbacks PatchGuard protection☆44Aug 15, 2021Updated 4 years ago
- INF Studio for easier working with driver installation files☆39Nov 11, 2023Updated 2 years ago
- Simple Intel VT-x hypervisor☆367Dec 10, 2023Updated 2 years ago
- Windows PDB parser for kernel-mode environment.☆117Jun 7, 2025Updated last year
- Proton VPN Special Offer - Get 70% off • AdSpecial partner offer. Trusted by over 100 million users worldwide. Tested, Approved and Recommended by Experts.
- A library to develop kernel level Windows payloads for post HVCI era☆520May 18, 2021Updated 5 years ago
- HyperDeceit is the ultimate all-in-one library that emulates Hyper-V for Windows, giving you the ability to intercept and manipulate oper…☆384Jun 3, 2023Updated 3 years ago
- Detect strange memory regions and DLLs☆191Jan 20, 2022Updated 4 years ago
- Hook all callbacks which are registered with LdrRegisterDllNotification☆100Apr 3, 2025Updated last year
- A DTrace on Windows Reimplementation☆374May 28, 2026Updated last month
- A free but powerful Windows kernel research tool.☆2,707Dec 14, 2025Updated 7 months ago
- Kernel Driver Utility☆2,657Updated this week