VergiliusProject / vergilius-projectLinks
This project provides a collection of Microsoft Windows kernel structures, unions and enumerations. Most of them are not officially documented and cannot be found in Windows Driver Kit (WDK) headers. The target audience of this site is driver developers and kernel researches.
☆209Updated 6 months ago
Alternatives and similar repositories for vergilius-project
Users that are interested in vergilius-project are comparing it to the libraries listed below
Sorting:
- Driver Buddy Reloaded is an IDA Pro Python plugin that helps automate some tedious Windows Kernel Drivers reverse engineering tasks☆372Updated last month
- APC Internals Research Code☆166Updated 5 years ago
- Research on Windows Kernel Executive Callback Objects☆306Updated 5 years ago
- Some research on AltSystemCallHandlers functionality in Windows 10 20H1 18999☆226Updated 5 years ago
- A library to develop kernel level Windows payloads for post HVCI era☆427Updated 4 years ago
- ShowStopper is a tool for helping malware researchers explore and test anti-debug techniques or verify debugger plugins or other solution…☆213Updated 3 years ago
- Yet another windows internals repo☆207Updated 3 years ago
- Canadian Furious Beaver is a ProcMon-style tool designed only for capturing IRPs sent to any Windows driver.☆325Updated last year
- msdocsviewer is a simple tool that parses Microsoft's win32 API and driver documentation to be used within IDA.☆152Updated last year
- MemoryRanger protects kernel data and code by running drivers and hosting data in isolated kernel enclaves using VT-x and EPT features. M…☆229Updated 5 years ago
- This is a collection of interesting codes about Windows Process creation.☆236Updated last year
- ☆162Updated 3 years ago
- BYOVD: Loading dbk64.sys and grabbing a handle to it☆156Updated 3 years ago
- Advanced driver monitoring utility.☆215Updated 3 years ago
- Debugger Anti-Detection Benchmark☆348Updated 3 weeks ago
- A collection of themes based on pastel colors, created for reverse engineers☆148Updated 4 months ago
- Hex-Rays microcode plugin for automated simplification of Windows Kernel decompilation.☆611Updated 6 months ago
- Windows Kernel Programming☆130Updated 5 years ago
- A list of excellent resources for anyone to deepen their understanding with regards to Windows Kernel Exploitation and general low level …☆154Updated 2 years ago
- Converted phnt (Native API header files from the System Informer project) to IDA TIL, IDC (Hex-Rays).☆146Updated 11 months ago
- IDA Pro plugin to make bitfield accesses easier to grep☆243Updated this week
- An application to view and filter pool allocations from a dmp file on Windows 10 RS5+.☆141Updated 2 years ago
- Toy scripts for playing with WinDbg JS API☆235Updated last year
- A more stealthy variant of "DLL hollowing"☆353Updated last year
- A collection of various vulnerable (mostly physical memory exposing) drivers.☆397Updated 3 years ago
- ☆146Updated 2 years ago
- Code Injection, Inject malicious payload via pagetables pml4.☆242Updated 4 years ago
- An IDA Plugin that help analyzing module that use COM☆217Updated 2 years ago
- x64 Windows PatchGuard bypass, register process-creation callbacks from unsigned code☆206Updated 4 years ago
- Analyze patches in a process☆255Updated 4 years ago