Alternatives and similar repositories for Windbg2Struct:

Users that are interested in Windbg2Struct are comparing it to the libraries listed below

• MeeSong / Sunstrider
  Analyze PatchGuard
  ☆54Updated 6 years ago
• yardenshafir / KernelDataStructureFinder
  Driver and WinDBG scripts to dump information about all resources and lookaside lists
  ☆67Updated 4 years ago
• SouhailHammou / KernelSymbolsHelper
  Retrieve pointers to undocumented kernel functions and offsets to members within undocumented structures to use in your driver by using t…
  ☆53Updated 5 years ago
• JaanusKaapPublic / BlogHyperV
  Tools made for my Hyper-V blog series @ https://foxhex0ne.blogspot.com/
  ☆55Updated 4 years ago
• bluefrostsecurity / Meltdown-KVA-Shadow-Leak
  ☆44Updated 4 years ago
• JKornev / cfgdump
  Windbg extension that allows you analyze Control Flow Guard map
  ☆36Updated 3 years ago
• rwfpl / rewolf-ldrdebug
  Helper utility for debugging windows PE/PE+ loader.
  ☆51Updated 9 years ago
• ajkhoury / Errata1337
  ☆67Updated 4 years ago
• tandasat / ia32-doc
  IA32-doc is a project which aims to put as many definitions from the Intel Manual into machine-processable format as possible
  ☆16Updated 2 years ago
• POPFD / HypervisorBase
  A library for intel VT-x hypervisor functionality supporting EPT shadowing.
  ☆48Updated 3 years ago
• KelvinMsft / UsbMon
  ☆34Updated 4 years ago
• SinaKarvandi / x64-Driver-Inline-Assembly
  This is a simple driver with x64 inline assembly
  ☆54Updated 4 years ago
• AaLl86 / retroware
  This repository contains some tools that I have written in the past
  ☆28Updated last year
• idkwim / frookSINATRA
  POC of sysenter x64 LSTAR MSR hook
  ☆38Updated 10 years ago
• yuvatia / Win10GdiExploitation
  Exploiting HEVD's WriteWhatWhereIoctlDispatch for LPE on Windows 10 TH2 through RS3 using GDI objects.
  ☆24Updated 6 years ago
• Barakat / windows.sandbox
  Windows sandbox PoC
  ☆31Updated 4 years ago
• alexvogt91 / NetDriver
  kernel-mode TDI client which can send and receive HTTP requests
  ☆55Updated 6 years ago
• lldre / handle_exploration
  Figuring out the cause of a handle downgrade
  ☆23Updated 2 years ago
• cxxrev0to1dev / nb_obfuscator
  win32/x64 obfuscate framework
  ☆32Updated 5 years ago
• changeofpace / x64dbg-Anti-Debug-POC
  viewing page boundaries of pages with PAGE_NOACCESS protection reveals the presence of x64dbg.
  ☆23Updated 8 years ago
• kyREcon / IsKernelDebuggerPresent
  Detects if a Kernel mode debugger is active by reading the value of KUSER_SHARED_DATA.KdDebuggerEnabled. It is a high level and portable …
  ☆23Updated 7 years ago
• zer0mem / VadScanner
  PoC of BOOST-ed _EPROCESS.VadRoot iterating
  ☆25Updated 10 years ago
• MortenSchenk / tagWnd-Hardening-Bypass
  Bypass for the hardening against usage of tagWnd as a kernel read/write primitive
  ☆29Updated 7 years ago
• SamLarenN / PSC-Engine
  Polymorphic Stub Creator
  ☆30Updated 7 years ago
• dro / win10-ida-types
  Windows 10 kernel and ntdll internal types, directly compatible with ida.
  ☆50Updated 6 years ago