Zhuagenborn / Windows-x86-Debugger

Related projects: ⓘ

• kyREcon / IsKernelDebuggerPresent
  Detects if a Kernel mode debugger is active by reading the value of KUSER_SHARED_DATA.KdDebuggerEnabled. It is a high level and portable …
  ☆22Updated 7 years ago
• kouzhudong / libdrv
  Static Library For Windows Drivers
  ☆29Updated 3 weeks ago
• japajoe / StackVMCPP
  A stack and register based virtual machine which can compile and execute arbitrary code in runtime
  ☆41Updated last year
• KelvinMsft / UsbMon
  ☆33Updated 3 years ago
• MiroKaku / ConMon
  Windows Console Monitor
  ☆32Updated 5 years ago
• hugsy / modern-cpp-windows-driver-template
  Windows driver template, using C++20 & cmake & GithubActions
  ☆17Updated last month
• AnzeLesnik / MySyscall
  Example of hijacking system calls via function pointer tables
  ☆30Updated 3 years ago
• cxxrev0to1dev / nb_obfuscator
  win32/x64 obfuscate framework
  ☆32Updated 5 years ago
• addrianyy / asmlib_x64
  x64 assembler library
  ☆32Updated 3 months ago
• alexvogt91 / NetDriver
  kernel-mode TDI client which can send and receive HTTP requests
  ☆53Updated 6 years ago
• Vicshann / Common
  Some eternal WIP stuff :)
  ☆14Updated 2 months ago
• gigabitwize / dank
  Driver Loader/BE Bypass/Win Malware(lol)
  ☆33Updated 5 years ago
• jnastarot / cleancall
  Library for using direct system calls
  ☆35Updated 4 years ago
• bytesundso / SneakCalls
  direct systemcalls with a modern c++20 interface.
  ☆41Updated last year
• GravitLauncher / Avanguard
  fork HoShiMin Avanguard
  ☆19Updated 5 years ago
• ioncodes / rapid-kdbg-hyperv
  ☆14Updated last year
• h4xu3lyn / FuckPg
  Analysing and defeating PatchGuard universally
  ☆34Updated 3 years ago
• tandasat / ia32-doc
  IA32-doc is a project which aims to put as many definitions from the Intel Manual into machine-processable format as possible
  ☆16Updated 2 years ago
• Lima-X / XOrCryptEx
  XOrCryptEx lightweight C Utility/Algorithm
  ☆11Updated 2 years ago
• changeofpace / x64dbg-Anti-Debug-POC
  viewing page boundaries of pages with PAGE_NOACCESS protection reveals the presence of x64dbg.
  ☆21Updated 7 years ago
• RIscRIpt / ntl
  Very tiny and selective implementation of STL for Windows NT kernel mode drivers
  ☆18Updated 3 years ago
• Air14 / KDBGDecryptor
  A simple example how to decrypt kernel debugger data block
  ☆26Updated 3 years ago
• BeneficialCode / WmipCodeSamples
  What makes it page
  ☆17Updated 2 years ago
• ajkhoury / windbg_to_c
  Translates WinDbg "dt" structure dump to a C structure
  ☆12Updated 4 years ago
• ntoskrnl7 / ldk
  Load Dll into Kernel space
  ☆39Updated 2 years ago
• 393686984 / vt-driver
  ☆21Updated this week
• he4rtbleed / PPLL
  Protected Process Light Library
  ☆18Updated 4 years ago
• zhuhuibeishadiao / DriverMaper
  map driver to memory
  ☆25Updated 6 years ago
• moukayz / KernelDriverDemo
  ☆22Updated 5 years ago
• jnastarot / HIGU_ntcall
  Extended library for using direct system calls on windows
  ☆16Updated 2 years ago