VergiliusProject / vergilius-projectLinks
This project provides a collection of Microsoft Windows kernel structures, unions and enumerations. Most of them are not officially documented and cannot be found in Windows Driver Kit (WDK) headers. The target audience of this site is driver developers and kernel researches.
☆208Updated 5 months ago
Alternatives and similar repositories for vergilius-project
Users that are interested in vergilius-project are comparing it to the libraries listed below
Sorting:
- ShowStopper is a tool for helping malware researchers explore and test anti-debug techniques or verify debugger plugins or other solution…☆211Updated 3 years ago
- Research on Windows Kernel Executive Callback Objects☆290Updated 5 years ago
- Some research on AltSystemCallHandlers functionality in Windows 10 20H1 18999☆221Updated 5 years ago
- Driver Buddy Reloaded is an IDA Pro Python plugin that helps automate some tedious Windows Kernel Drivers reverse engineering tasks☆370Updated last week
- Yet another windows internals repo☆206Updated 3 years ago
- APC Internals Research Code☆166Updated 5 years ago
- A library to develop kernel level Windows payloads for post HVCI era☆421Updated 4 years ago
- Canadian Furious Beaver is a ProcMon-style tool designed only for capturing IRPs sent to any Windows driver.☆323Updated last year
- MemoryRanger protects kernel data and code by running drivers and hosting data in isolated kernel enclaves using VT-x and EPT features. M…☆228Updated 4 years ago
- This is a collection of interesting codes about Windows Process creation.☆234Updated last year
- Code Injection, Inject malicious payload via pagetables pml4.☆241Updated 4 years ago
- An application to view and filter pool allocations from a dmp file on Windows 10 RS5+.☆141Updated 2 years ago
- BYOVD: Loading dbk64.sys and grabbing a handle to it☆154Updated 3 years ago
- IDA Pro plugin to make bitfield accesses easier to grep☆239Updated 4 months ago
- A collection of themes based on pastel colors, created for reverse engineers☆146Updated 3 months ago
- A list of excellent resources for anyone to deepen their understanding with regards to Windows Kernel Exploitation and general low level …☆145Updated 2 years ago
- ☆162Updated 3 years ago
- x64 Windows PatchGuard bypass, register process-creation callbacks from unsigned code☆205Updated 4 years ago
- Analyze patches in a process☆254Updated 3 years ago
- Debugger Anti-Detection Benchmark☆339Updated this week
- Hex-Rays microcode plugin for automated simplification of Windows Kernel decompilation.☆607Updated 5 months ago
- Using Microsoft Warbird to automatically unpack and execute encrypted shellcode in ClipSp.sys without triggering PatchGuard☆248Updated 2 years ago
- A collection of various vulnerable (mostly physical memory exposing) drivers.☆394Updated 3 years ago
- Windows Kernel Programming☆129Updated 5 years ago
- ☆168Updated 9 months ago
- Global user-mode hooking framework, based on AppInit_DLLs. The goal is to allow you to rapidly develop hooks to inject in an arbitrary pr…☆172Updated 3 years ago
- Set of antianalysis techniques found in malware☆132Updated last year
- Advanced driver monitoring utility.☆213Updated 3 years ago
- Toy scripts for playing with WinDbg JS API☆233Updated last year
- msdocsviewer is a simple tool that parses Microsoft's win32 API and driver documentation to be used within IDA.☆152Updated last year