alex-ilgayev / windbg-kernel-debug-cheat-sheetLinks
Helpful WinDBG command for kernel debugging
☆28Updated 5 years ago
Alternatives and similar repositories for windbg-kernel-debug-cheat-sheet
Users that are interested in windbg-kernel-debug-cheat-sheet are comparing it to the libraries listed below
Sorting:
- The Windbg extensions to study Hyper-V on Intel and AMD processors.☆169Updated 5 months ago
- Converted phnt (Native API header files from the System Informer project) to IDA TIL, IDC (Hex-Rays).☆162Updated last year
- msdocsviewer is a simple tool that parses Microsoft's win32 API and driver documentation to be used within IDA.☆161Updated 2 years ago
- IOCTLpus can be used to make DeviceIoControl requests with arbitrary inputs (with functionality somewhat similar to Burp Repeater).☆96Updated 4 years ago
- Rewrite and obfuscate code in compiled binaries☆273Updated last month
- A list of excellent resources for anyone to deepen their understanding with regards to Windows Kernel Exploitation and general low level …☆165Updated 3 years ago
- Windows 11 24H2-25H2 Runtime PatchGuard Bypass☆244Updated 3 months ago
- ☆93Updated last year
- compile-time control flow obfuscation using mba☆199Updated 2 years ago
- Single header version of System Informer's phnt library.☆240Updated last month
- ☆149Updated 2 years ago
- Find out how to bypass HVCI (or not). My own research on Microsoft Warbird (specifically in clipsp.sys)☆89Updated 3 months ago
- Demystifying PatchGuard is a comprehensive analysis of Microsoft's security feature called PatchGuard, which is designed to prevent unaut…☆133Updated 2 years ago
- Writeups for CTF challenges☆35Updated 2 years ago
- C++ macro for x64 programs that breaks ida hex-rays decompiler tool.☆137Updated last year
- Small tool to convert beteween the PE alignments (raw and virtual).☆111Updated 3 years ago
- Windows kernel debugger for Linux hosts running Windows under KVM/QEMU☆122Updated this week
- NovaHypervisor is a defensive x64 Intel host based hypervisor. The goal of this project is to protect against kernel based attacks (eithe…☆245Updated 4 months ago
- APC Internals Research Code☆167Updated 5 years ago
- Windows KASLR bypass using prefetch side-channel☆175Updated last year
- uefi diskless persistence technique + OVMF secureboot bypass☆95Updated last year
- A devirtualization engine for Themida.☆106Updated last year
- binary instrumentation, analysis, and patching framework☆100Updated last week
- Post exploitation technique to turn arbitrary kernel write / increment into full read/write primitive on Windows 11 22H2☆247Updated 3 years ago
- Integration of Microsoft Warbird with the MSVC compiler☆127Updated 2 years ago
- A collection of tools, source code, and papers researching Windows' implementation of CET.☆88Updated 5 years ago
- Using Microsoft Warbird to automatically unpack and execute encrypted shellcode in ClipSp.sys without triggering PatchGuard☆261Updated 3 years ago
- Abusing exceptions for code execution.☆113Updated 3 years ago
- Resolve DOS MZ executable symbols at runtime☆96Updated 4 years ago
- VinCSS Reverse Engineering, Malware Analysing Tools & Ultilities☆27Updated 4 years ago