VollRagm / PTView
Browse Page Tables on Windows (Page Table Viewer)
☆185Updated 2 years ago
Related projects ⓘ
Alternatives and complementary repositories for PTView
- Kernel driver for detecting Intel VT-x hypervisors.☆170Updated last year
- C++ library for parsing and manipulating PE files statically and dynamically.☆87Updated last year
- ☆139Updated 3 years ago
- Analyze patches in a process☆247Updated 3 years ago
- x64 Windows PatchGuard bypass, register process-creation callbacks from unsigned code☆196Updated 3 years ago
- A proof of concept demonstrating instrumentation callbacks on Windows 10 21h1 with a TLS variable to ensure all syscalls are caught.☆117Updated 3 years ago
- Vectored Exception Handling Hooking Class☆145Updated 5 years ago
- Resolve DOS MZ executable symbols at runtime☆93Updated 3 years ago
- x64 Windows kernel code execution via user-mode, arbitrary syscall, vulnerable IOCTLs demonstration☆226Updated 2 years ago
- Demo proof of concept for shadow regions, and implementation of HyperDeceit.☆267Updated last year
- A library to read physical memory and system-wide virtual memory.☆122Updated 6 years ago
- A customizable process dumper.☆129Updated 5 years ago
- Load your driver like win32k.sys☆246Updated 2 years ago
- Memory hacking library powered by AMD SVM☆297Updated last year
- Hygieia, a vulnerable driver traces scanner written in C++ as an x64 Windows kernel driver.☆136Updated 2 years ago
- Elevate a process to be a protected process☆142Updated 5 years ago
- ☆153Updated 5 years ago
- ☆193Updated last year
- A mapper that maps shellcode into loaded large page drivers☆229Updated 2 years ago
- Intercepting DeviceControl via WPP☆127Updated 5 years ago
- Debugger Anti-Detection Benchmark☆291Updated 11 months ago
- Minimalistic AMD-V/SVM hypervisor with memory introspection capabilities☆182Updated 5 months ago
- Kernel LdrLoadDll injector☆258Updated 6 years ago
- Some research on AltSystemCallHandlers functionality in Windows 10 20H1 18999☆206Updated 5 years ago
- based on https://github.com/secrary/Hooking-via-InstrumentationCallback☆67Updated 5 years ago
- Collection of hypervisor detections☆189Updated last month
- Emulate Drivers in RING3 with self context mapping or unicorn☆302Updated 2 years ago
- PE-Dump-Fixer☆102Updated 4 years ago
- Tutorial & a blog post that demonstrate how to code a Windows driver to inject a custom DLL into all running processes. I coded it from s…☆123Updated 3 years ago
- An x64 page table iterator written in C++ as a kernel mode windows driver.☆103Updated 3 years ago