dmaivel / ntoseyeLinks
Windows kernel debugger for Linux hosts running Windows under KVM/QEMU
☆98Updated 5 months ago
Alternatives and similar repositories for ntoseye
Users that are interested in ntoseye are comparing it to the libraries listed below
Sorting:
- dynamic binary instrumentation, analysis, and patching framework☆95Updated last month
- bypassing intel txt's tboot integrity checks via coreboot shim☆83Updated 7 months ago
- The Windbg extensions to study Hyper-V on Intel and AMD processors.☆167Updated 2 months ago
- Generate a PDB file given the old PDB file and an address mapping☆49Updated 3 months ago
- ntoskrnl.exe and bootmgfw.efi obfuscated with CodeDefender☆49Updated 3 weeks ago
- Abusing exceptions for code execution.☆113Updated 2 years ago
- ☆154Updated 3 months ago
- Rewrite and obfuscate code in compiled binaries☆264Updated 2 weeks ago
- An x64dbg plugin which helps make sense of long C++ symbols☆57Updated 2 years ago
- A large collection of 32bit and 64bit PE files useful for verifying the correctness of bin2bin transformations☆61Updated last year
- Windows KASLR bypass using prefetch side-channel☆144Updated last year
- A set of LLVM and GCC based plugins that perform code obfuscation.☆132Updated 3 weeks ago
- ☆25Updated last month
- Report and exploit of CVE-2024-21305.☆38Updated last year
- ☆95Updated last year
- monitors hidden syscalls called from call of duty anticheat☆86Updated 9 months ago
- A journal for $6,000 Riot Vanguard bounty.☆65Updated 2 years ago
- Harness to issue Virtual Secure Mode (VSM) "secure calls" from VTL 0 to VTL 1☆67Updated 2 months ago
- Find out how to bypass HVCI (or not). My own research on Microsoft Warbird (specifically in clipsp.sys)☆71Updated 2 weeks ago
- Converted phnt (Native API header files from the System Informer project) to IDA TIL, IDC (Hex-Rays).☆157Updated last year
- NovaHypervisor is a defensive x64 Intel host based hypervisor. The goal of this project is to protect against kernel based attacks (eithe…☆235Updated last month
- C++ macro for x64 programs that breaks ida hex-rays decompiler tool.☆129Updated last year
- PEIM (UEFI) bootkit targeting OVMF (EDK2)☆42Updated last year
- Proof-of-concept game using VBS enclaves to protect itself from cheating☆45Updated last year
- Yet another IDA Pro/Home plugin for deobfuscating stack strings☆104Updated last month
- Contains all the applications developed for the Second part of the 7th Edition of Windows Internals book☆114Updated last year
- Report and exploit of CVE-2023-36427☆89Updated last year
- WinDbg extension written in Rust to dump the CPU / memory state of a running VM☆124Updated 3 weeks ago
- A Binary Ninja plugin to detect Themida, WinLicense and Code Virtualizer's obfuscated code locations.☆84Updated last year
- uefi diskless persistence technique + OVMF secureboot bypass☆94Updated last year