clymb3r / KdExploitMe
A kernel driver to practice writing exploits against, as well as some example exploits using public techniques.
☆402Updated 10 years ago
Alternatives and similar repositories for KdExploitMe:
Users that are interested in KdExploitMe are comparing it to the libraries listed below
- Papers, blogposts, tutorials etc for learning about Windows kernel exploitation, internals and (r|b)ootkits☆388Updated 5 years ago
- A tool to help when dealing with Windows IOCTL codes or reversing Windows drivers.☆425Updated 6 years ago
- Content from presentation at BHUSA 2017☆180Updated 7 years ago
- Pocs for Antivirus Software‘s Kernel Vulnerabilities☆263Updated 7 years ago
- ROPMEMU is a framework to analyze, dissect and decompile complex code-reuse attacks.☆285Updated 8 years ago
- A tool to detect and crash Cuckoo Sandbox☆289Updated 5 months ago
- Fuzz and Detect "Use After Free" vulnerability in win32k.sys ( Heap based )☆132Updated 9 years ago
- Cross Platform Kernel Fuzzer Framework☆448Updated 6 years ago
- Automatically exported from code.google.com/p/ioctlfuzzer☆157Updated 9 years ago
- C++ application that uses memory and code hooks to detect packers☆270Updated 6 years ago
- Cminer is a tool for enumerating the code caves in PE files.☆146Updated last year
- HORSEPILL rootkit PoC☆224Updated 8 years ago
- Bunch of techniques potentially used by malware to detect analysis environments☆156Updated 8 years ago
- Python scripts for reverse engineering.☆181Updated 3 years ago
- Small tool for generating ropchains using unicorn and z3☆197Updated 6 years ago
- ☆231Updated 7 years ago
- A set of tutorials about code injection for Windows.☆307Updated 4 months ago
- PowerLoaderEx - Advanced Code Injection Technique for x32 / x64☆360Updated 7 years ago
- DriverBuddy is an IDA Python script to assist with the reverse engineering of Windows kernel drivers.☆354Updated 5 years ago
- Zerokit/GAPZ rootkit (non buildable and only for researching)☆181Updated 5 years ago
- Patching ROP-encoded shellcodes into PEs☆184Updated 7 years ago
- C++-based shellcode builder☆112Updated 4 years ago
- flare-dbg is a project meant to aid malware reverse engineers in rapidly developing debugger scripts.☆148Updated 7 years ago
- DLL Injection tool to unlock guest VMs☆231Updated 12 years ago
- ☆140Updated 7 years ago
- DC25 5A1F - Demystifying Windows Kernel Exploitation by Abusing GDI Objects☆143Updated 7 years ago
- Loading unsigned code into kernel in Windows 10 (64) with help of VMware Workstation Pro/Player design flaw☆138Updated 7 years ago
- PEI stage backdoor for UEFI compatible firmware☆210Updated 3 years ago
- Hardcore corruption of my execve() vulnerability in WSL☆214Updated 6 years ago