VergiliusProject / vergilius-projectLinks
This project provides a collection of Microsoft Windows kernel structures, unions and enumerations. Most of them are not officially documented and cannot be found in Windows Driver Kit (WDK) headers. The target audience of this site is driver developers and kernel researches.
☆207Updated 4 months ago
Alternatives and similar repositories for vergilius-project
Users that are interested in vergilius-project are comparing it to the libraries listed below
Sorting:
- Research on Windows Kernel Executive Callback Objects☆288Updated 5 years ago
- Some research on AltSystemCallHandlers functionality in Windows 10 20H1 18999☆219Updated 5 years ago
- ShowStopper is a tool for helping malware researchers explore and test anti-debug techniques or verify debugger plugins or other solution…☆206Updated 2 years ago
- APC Internals Research Code☆166Updated 4 years ago
- A library to develop kernel level Windows payloads for post HVCI era☆411Updated 4 years ago
- Driver Buddy Reloaded is an IDA Pro Python plugin that helps automate some tedious Windows Kernel Drivers reverse engineering tasks☆369Updated 8 months ago
- Code Injection, Inject malicious payload via pagetables pml4.☆240Updated 3 years ago
- A more stealthy variant of "DLL hollowing"☆350Updated last year
- Hex-Rays microcode plugin for automated simplification of Windows Kernel decompilation.☆603Updated 4 months ago
- IDA Pro plugin to make bitfield accesses easier to grep☆239Updated 4 months ago
- Yet another windows internals repo☆207Updated 3 years ago
- An IDA Plugin that help analyzing module that use COM☆215Updated last year
- Converted phnt (Native API header files from the System Informer project) to IDA TIL, IDC (Hex-Rays).☆143Updated 10 months ago
- x64 Windows PatchGuard bypass, register process-creation callbacks from unsigned code☆204Updated 4 years ago
- BYOVD: Loading dbk64.sys and grabbing a handle to it☆152Updated 3 years ago
- A modern c++ implementation of windows heavens gate☆224Updated 4 years ago
- A list of excellent resources for anyone to deepen their understanding with regards to Windows Kernel Exploitation and general low level …☆144Updated 2 years ago
- MemoryRanger protects kernel data and code by running drivers and hosting data in isolated kernel enclaves using VT-x and EPT features. M…☆228Updated 4 years ago
- This is a collection of interesting codes about Windows Process creation.☆234Updated last year
- Windows NT x64 syscall fuzzer☆607Updated last year
- Browse Page Tables on Windows (Page Table Viewer)☆210Updated 3 years ago
- Canadian Furious Beaver is a ProcMon-style tool designed only for capturing IRPs sent to any Windows driver.☆322Updated last year
- Advanced driver monitoring utility.☆212Updated 2 years ago
- An application to view and filter pool allocations from a dmp file on Windows 10 RS5+.☆139Updated 2 years ago
- ☆106Updated 3 years ago
- Translates WinDbg "dt" structure dump to a C structure☆128Updated 8 years ago
- msdocsviewer is a simple tool that parses Microsoft's win32 API and driver documentation to be used within IDA.☆152Updated last year
- Post exploitation technique to turn arbitrary kernel write / increment into full read/write primitive on Windows 11 22H2☆228Updated 2 years ago
- A collection of themes based on pastel colors, created for reverse engineers☆146Updated 2 months ago
- Bindings for Microsoft WinDBG TTD☆225Updated last year