depletionmode / divination
Python module for platform, iospace and physmem inspection
☆24Updated 4 years ago
Alternatives and similar repositories for divination:
Users that are interested in divination are comparing it to the libraries listed below
- EFI DXE Emulator and Interactive Debugger☆82Updated 4 years ago
- EFI DXE Emulator and Interactive Debugger☆88Updated 5 years ago
- The report and the exploit of CVE-2021-26943, the kernel-to-SMM local privilege escalation vulnerability in ASUS UX360CA BIOS version 303…☆137Updated 4 years ago
- System Management RAM analysis tool☆76Updated 8 months ago
- IDA plugin for extending UEFI reverse engineering capabilities☆59Updated 3 years ago
- Arbitrary SMM code execution exploit for industry-wide 0day vulnerability in AMI Aptio based firmwares☆66Updated 8 years ago
- Breaking Secure Boot with SMM☆40Updated 3 years ago
- Tool to extract the kallsyms (System.map) from a memory dump☆26Updated last year
- Helper script for Linux kernel disassemble or debugging with IDA Pro on VMware + GDB stub (including some symbols helpers)☆36Updated last year
- ☆92Updated 9 months ago
- VMX intrinsics plugin for Hex-Rays decompiler☆70Updated 5 years ago
- ☆27Updated 3 years ago
- This is an instruction to run your own SMM code.☆102Updated 4 years ago
- VMCS Auditor provides almost all of Intel's VMCS Layout checklist based on Bochs Emulator.☆32Updated 6 years ago
- Build your emulation environment as needed☆66Updated 4 years ago
- Windbg2ida lets you dump each step in Windbg then shows these steps in IDA☆76Updated 9 months ago
- Helper plugin for analyzing UEFI firmware☆90Updated 10 months ago
- Making Type Info Library (TIL) file for Apache modules☆55Updated 4 years ago
- kernel pool windbg extension☆81Updated 9 years ago
- ☆16Updated 2 weeks ago
- ☆21Updated 3 years ago
- ROP database plugin for IDA☆31Updated 6 years ago
- Some scripts for IDA Pro to assist with reverse engineering EFI binaries☆74Updated 9 years ago
- PoC for a snapshot-based coverage-guided fuzzer targeting Windows kernel components☆68Updated 3 years ago
- A fast execution trace symbolizer for Windows.☆130Updated 11 months ago
- Python bindings for the Microsoft Hypervisor Platform APIs.☆80Updated 5 years ago
- Writing WDF Drivers I: Core Concepts Lab Material☆51Updated last year
- ☆47Updated 2 years ago
- SentinelOne's KeRnel Exploits Advanced Mitigations☆53Updated 6 years ago
- ☆33Updated 3 years ago