alex-ilgayev / windbg-kernel-debug-cheat-sheetLinks
Helpful WinDBG command for kernel debugging
☆28Updated 5 years ago
Alternatives and similar repositories for windbg-kernel-debug-cheat-sheet
Users that are interested in windbg-kernel-debug-cheat-sheet are comparing it to the libraries listed below
Sorting:
- The Windbg extensions to study Hyper-V on Intel and AMD processors.☆167Updated 3 months ago
- Converted phnt (Native API header files from the System Informer project) to IDA TIL, IDC (Hex-Rays).☆158Updated last year
- msdocsviewer is a simple tool that parses Microsoft's win32 API and driver documentation to be used within IDA.☆155Updated last year
- A list of excellent resources for anyone to deepen their understanding with regards to Windows Kernel Exploitation and general low level …☆162Updated 3 years ago
- Rewrite and obfuscate code in compiled binaries☆269Updated last week
- IOCTLpus can be used to make DeviceIoControl requests with arbitrary inputs (with functionality somewhat similar to Burp Repeater).☆94Updated 3 years ago
- Writeups for CTF challenges☆33Updated 2 years ago
- Small tool to convert beteween the PE alignments (raw and virtual).☆106Updated 2 years ago
- Single header version of System Informer's phnt library.☆232Updated last week
- APC Internals Research Code☆168Updated 5 years ago
- Find out how to bypass HVCI (or not). My own research on Microsoft Warbird (specifically in clipsp.sys)☆80Updated last month
- Post exploitation technique to turn arbitrary kernel write / increment into full read/write primitive on Windows 11 22H2☆246Updated 3 years ago
- This project provides a collection of Microsoft Windows kernel structures, unions and enumerations. Most of them are not officially docum…☆227Updated last month
- ☆148Updated 2 years ago
- ☆95Updated last year
- ☆32Updated 3 years ago
- Some research on AltSystemCallHandlers functionality in Windows 10 20H1 18999☆237Updated 6 years ago
- Repository for the code snippets from the AllThingsIDA video channel☆119Updated 2 months ago
- C++ macro for x64 programs that breaks ida hex-rays decompiler tool.☆131Updated last year
- ☆60Updated 9 months ago
- A collection of tools, source code, and papers researching Windows' implementation of CET.☆86Updated 5 years ago
- Demystifying PatchGuard is a comprehensive analysis of Microsoft's security feature called PatchGuard, which is designed to prevent unaut…☆130Updated 2 years ago
- Static Binary Instrumentation tool for Windows x64 executables☆207Updated 2 months ago
- Advanced driver monitoring utility.☆218Updated 3 years ago
- Windows 11 24H2-25H2 Runtime PatchGuard Bypass☆224Updated last month
- Browse Page Tables on Windows (Page Table Viewer)☆224Updated 3 years ago
- compile-time control flow obfuscation using mba☆199Updated 2 years ago
- NovaHypervisor is a defensive x64 Intel host based hypervisor. The goal of this project is to protect against kernel based attacks (eithe…☆237Updated 2 months ago
- Using Microsoft Warbird to automatically unpack and execute encrypted shellcode in ClipSp.sys without triggering PatchGuard☆257Updated 3 years ago
- Debugger Anti-Detection Benchmark☆380Updated 4 months ago