dmaivel / ntoseyeLinks
Windows kernel debugger for Linux hosts running Windows under KVM/QEMU
☆105Updated 2 weeks ago
Alternatives and similar repositories for ntoseye
Users that are interested in ntoseye are comparing it to the libraries listed below
Sorting:
- The Windbg extensions to study Hyper-V on Intel and AMD processors.☆167Updated 3 months ago
- dynamic binary instrumentation, analysis, and patching framework☆98Updated 2 weeks ago
- bypassing intel txt's tboot integrity checks via coreboot shim☆83Updated 9 months ago
- C++ macro for x64 programs that breaks ida hex-rays decompiler tool.☆133Updated last year
- Rewrite and obfuscate code in compiled binaries☆270Updated last week
- ☆156Updated last month
- A Binary Ninja plugin to detect Themida, WinLicense and Code Virtualizer's obfuscated code locations.☆88Updated last year
- A set of LLVM and GCC based plugins that perform code obfuscation.☆134Updated 2 months ago
- Generate a PDB file given the old PDB file and an address mapping☆51Updated 4 months ago
- A large collection of 32bit and 64bit PE files useful for verifying the correctness of bin2bin transformations☆62Updated last year
- Converted phnt (Native API header files from the System Informer project) to IDA TIL, IDC (Hex-Rays).☆158Updated last year
- Find out how to bypass HVCI (or not). My own research on Microsoft Warbird (specifically in clipsp.sys)☆80Updated last month
- WinDbg extension written in Rust to dump the CPU / memory state of a running VM☆125Updated 2 months ago
- ☆93Updated last year
- Report and exploit of CVE-2024-21305.☆38Updated last year
- ☆29Updated 2 months ago
- Rust library for lifting raw binary data to LLVM IR☆60Updated 5 months ago
- An x64dbg plugin which helps make sense of long C++ symbols☆57Updated 2 years ago
- ☆61Updated 10 months ago
- Hyper-V related resources☆31Updated last year
- Windows KASLR bypass using prefetch side-channel☆172Updated last year
- NovaHypervisor is a defensive x64 Intel host based hypervisor. The goal of this project is to protect against kernel based attacks (eithe…☆237Updated 2 months ago
- Windows 11 24H2-25H2 Runtime PatchGuard Bypass☆230Updated last month
- A Windows PE packer for executables (x64) with LZMA compression and with full TLS (Thread Local Storage) support.☆91Updated last month
- Abusing exceptions for code execution.☆113Updated 2 years ago
- Contains all the applications developed for the Second part of the 7th Edition of Windows Internals book☆114Updated last year
- Report and exploit of CVE-2023-36427☆88Updated 2 years ago
- Different tools for Microsoft Hyper-V researching☆63Updated last week
- A collection of Proof-of-Concept implementations of various anti-disassembly techniques for ARM32 and ARM64 architectures.☆72Updated 8 months ago
- All LLVM binaries scrambled with SigBreaker and used to test against llvm-lit☆26Updated 7 months ago