Driver Buddy Reloaded is an IDA Pro Python plugin that helps automate some tedious Windows Kernel Drivers reverse engineering tasks
☆473Oct 19, 2026Updated last week
Alternatives and similar repositories for DriverBuddyReloaded
Users that are interested in DriverBuddyReloaded are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- IOCTLpus can be used to make DeviceIoControl requests with arbitrary inputs (with functionality somewhat similar to Burp Repeater).☆100Dec 20, 2021Updated 4 years ago
- Hex-Rays microcode plugin for automated simplification of Windows Kernel decompilation.☆682Jan 28, 2025Updated last year
- Helper idapython code for reversing kmdf drivers☆77Jul 20, 2022Updated 4 years ago
- Load your driver like win32k.sys☆258Aug 20, 2022Updated 4 years ago
- A DTrace on Windows Reimplementation☆379May 28, 2026Updated 5 months ago
- End-to-end encrypted cloud storage - Proton Drive • AdSpecial offer: 40% Off Yearly / 80% Off First Month. Protect your most important files, photos, and documents from prying eyes.
- ☆149Jun 5, 2023Updated 3 years ago
- ☆441Jan 1, 2025Updated last year
- A tool that is used to hunt vulnerabilities in x64 WDM drivers☆479Jun 18, 2026Updated 4 months ago
- Using Microsoft Warbird to automatically unpack and execute encrypted shellcode in ClipSp.sys without triggering PatchGuard☆271Aug 31, 2022Updated 4 years ago
- Hook system calls on Windows by using Kaspersky's hypervisor☆1,325Apr 2, 2026Updated 6 months ago
- Techniques/tools on Windows kernel exploitation☆269Sep 1, 2026Updated last month
- Loads a signed kernel driver which allows you to map any driver to kernel mode without any traces of the signed / mapped driver.☆421Aug 8, 2021Updated 5 years ago
- A library to develop kernel level Windows payloads for post HVCI era☆539May 18, 2021Updated 5 years ago
- Converted phnt (Native API header files from the System Informer project) to IDA TIL, IDC (Hex-Rays).☆171Aug 23, 2024Updated 2 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- IDA Pro plugin to make bitfield accesses easier to grep☆262Aug 3, 2025Updated last year
- x64 Windows kernel code execution via user-mode, arbitrary syscall, vulnerable IOCTLs demonstration☆427Jul 6, 2022Updated 4 years ago
- DriverBuddy is an IDA Python script to assist with the reverse engineering of Windows kernel drivers.☆385Jan 8, 2020Updated 6 years ago
- Stealthy UM <-> KM communication system without creating any system threads, permanent hooks, driver objects, section objects or device o…☆390Apr 30, 2026Updated 6 months ago
- A Pin Tool for tracing API calls etc☆1,709Jun 2, 2026Updated 4 months ago
- Kernel Driver Utility☆2,787Sep 29, 2026Updated last month
- Hygieia, a vulnerable driver traces scanner written in C++ as an x64 Windows kernel driver.☆155Feb 12, 2022Updated 4 years ago
- A collection of various vulnerable (mostly physical memory exposing) drivers.☆491Jun 15, 2022Updated 4 years ago
- Internals information about Hyper-V☆753Aug 10, 2026Updated 2 months ago
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- A mapper that maps shellcode into loaded large page drivers☆374Apr 26, 2022Updated 4 years ago
- Bypassing PatchGuard on modern x64 systems☆268Apr 9, 2023Updated 3 years ago
- IDA plugin and loader for UEFI firmware analysis and reverse engineering automation☆1,141Oct 12, 2026Updated 2 weeks ago
- Emulate Drivers in RING3 with self context mapping or unicorn☆394Aug 18, 2022Updated 4 years ago
- Browse Page Tables on Windows (Page Table Viewer)☆242Apr 2, 2022Updated 4 years ago
- ☆40Mar 23, 2023Updated 3 years ago
- A tool to help when dealing with Windows IOCTL codes or reversing Windows drivers.☆440Aug 22, 2018Updated 8 years ago
- Defeating Patchguard universally for Windows 8, Windows 8.1 and all versions of Windows 10 regardless of HVCI.☆916Nov 21, 2019Updated 6 years ago
- HackSys Extreme Vulnerable Driver (HEVD) - Windows & Linux☆3,120Feb 24, 2025Updated last year
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- Thread Stack Spoofing - PoC for an advanced In-Memory evasion technique allowing to better hide injected shellcode's memory allocation fr…☆1,253Jun 17, 2022Updated 4 years ago
- Analyze patches in a process☆264Jul 28, 2021Updated 5 years ago
- x64 Windows kernel driver mapper, inject unsigned driver using anycall☆232Feb 14, 2024Updated 2 years ago
- Hooking Windows' exception dispatcher to protect process's PML4☆275Jan 24, 2025Updated last year
- State-of-the-art native debugging tools☆4,163Oct 20, 2026Updated last week
- Manual mapper that uses PTE manipulation, Virtual Address Descriptor (VAD) manipulation, and forceful memory allocation to hide executabl…☆421Jan 29, 2022Updated 4 years ago
- VirtualKD-Redux - A revival and modernization of VirtualKD☆986Jun 23, 2024Updated 2 years ago