Alternatives and similar repositories for rostam-e-dastan

Users that are interested in rostam-e-dastan are comparing it to the libraries listed below

• zeze-zeze / ioctlance
  A tool that is used to hunt vulnerabilities in x64 WDM drivers
  ☆393Updated 5 months ago
• Accenture / VulFi
  IDA Pro plugin for query based searching within the binary useful mainly for vulnerability research.
  ☆631Updated 4 months ago
• junron / auto-enum
  IDA/Binary Ninja Plugin to automatically identify and set enums for standard functions
  ☆455Updated 3 months ago
• N0fix / rust-std-sigs
  ☆21Updated last year
• leesh3288 / WinPwn
  Windows Pwnable Study
  ☆376Updated 3 months ago
• daem0nc0re / VectorKernel
  PoCs for Kernelmode rootkit techniques research.
  ☆403Updated last week
• VoidSec / DriverBuddyReloaded
  Driver Buddy Reloaded is an IDA Pro Python plugin that helps automate some tedious Windows Kernel Drivers reverse engineering tasks
  ☆379Updated 2 months ago
• airbus-cert / ttddbg
  Time Travel Debugging IDA plugin
  ☆591Updated last year
• ycdxsb / WindowsPrivilegeEscalation
  Collection of Windows Privilege Escalation (Analyse/PoC/Exploit)
  ☆437Updated 9 months ago
• fareedfauzi / Flare-On-Challenges
  This repository aims to compile all Flare-On challenge binaries and write-ups. Update: 2014 -2024.
  ☆347Updated 5 months ago
• OALabs / BlobRunner
  Quickly debug shellcode extracted during malware analysis
  ☆612Updated 2 years ago
• airbus-cert / Yagi
  Yet Another Ghidra Integration for IDA
  ☆509Updated last year
• frank2 / packer-tutorial
  A tutorial on how to write a packer for Windows!
  ☆289Updated last year
• OALabs / hashdb-ida
  HashDB API hash lookup plugin for IDA Pro
  ☆331Updated 3 months ago
• BlackSnufkin / BYOVD
  BYOVD research use cases featuring vulnerable driver discovery and reverse engineering methodology. (CVE-2025-52915, CVE-2025-1055,).
  ☆362Updated last week
• yardenshafir / WinDbg_Scripts
  Useful scripts for WinDbg using the debugger data model
  ☆420Updated last year
• koutto / ioctlbf
  Windows Kernel Drivers fuzzer
  ☆370Updated 8 years ago
• Bw3ll / sharem
  SHAREM is a shellcode analysis framework, capable of emulating more than 20,000 WinAPIs and virutally all Windows syscalls. It also conta…
  ☆418Updated 2 months ago
• SentineLabs / AlphaGolang
  IDApython Scripts for Analyzing Golang Binaries
  ☆648Updated last year
• itaymigdal / awesome-injection
  Centralized resource for listing and organizing known injection techniques and POCs
  ☆621Updated last month
• sam-b / windows_kernel_address_leaks
  Examples of leaking Kernel Mode information from User Mode on Windows
  ☆619Updated 8 years ago
• 0dayResearchLab / msFuzz
  msFuzz is a coverage-guided fuzzer for Windows kernel drivers that utilizes Intel PT and leverages constraint and dependency analysis to …
  ☆187Updated 3 months ago
• junron / ida2py
  An intuitive query API for IDA Pro
  ☆159Updated 5 months ago
• TakahiroHaruyama / VDR
  Vulnerable driver research tool, result and exploit PoCs
  ☆215Updated last year
• VergiliusProject / vergilius-project
  This project provides a collection of Microsoft Windows kernel structures, unions and enumerations. Most of them are not officially docum…
  ☆215Updated 7 months ago
• eversinc33 / Banshee
  Experimental Windows x64 Kernel Rootkit with anti-rootkit evasion features.
  ☆563Updated last month
• Demonslay335 / CryptoTester
  A utility for playing with cryptography, geared towards ransomware analysis.
  ☆303Updated last month
• yardenshafir / IoRingReadWritePrimitive
  Post exploitation technique to turn arbitrary kernel write / increment into full read/write primitive on Windows 11 22H2
  ☆235Updated 3 years ago
• mrphrazer / obfuscation_detection
  Binary Ninja plugin to identify obfuscated code and other interesting code constructs
  ☆632Updated 6 months ago
• Cr4sh / SmmBackdoorNg
  Updated version of System Management Mode backdoor for UEFI based platforms: old dog, new tricks
  ☆340Updated last year