dmaivel / ntoseyeLinks
Windows kernel debugger for Linux hosts running Windows under KVM/QEMU
☆99Updated 6 months ago
Alternatives and similar repositories for ntoseye
Users that are interested in ntoseye are comparing it to the libraries listed below
Sorting:
- dynamic binary instrumentation, analysis, and patching framework☆98Updated 2 months ago
- bypassing intel txt's tboot integrity checks via coreboot shim☆83Updated 8 months ago
- The Windbg extensions to study Hyper-V on Intel and AMD processors.☆167Updated 3 months ago
- Generate a PDB file given the old PDB file and an address mapping☆49Updated 3 months ago
- Windows KASLR bypass using prefetch side-channel☆164Updated last year
- ☆28Updated last month
- An x64dbg plugin which helps make sense of long C++ symbols☆57Updated 2 years ago
- C++ macro for x64 programs that breaks ida hex-rays decompiler tool.☆131Updated last year
- ☆155Updated 2 weeks ago
- Rewrite and obfuscate code in compiled binaries☆267Updated last month
- A set of LLVM and GCC based plugins that perform code obfuscation.☆134Updated last month
- Abusing exceptions for code execution.☆113Updated 2 years ago
- A Windows PE packer for executables (x64) with LZMA compression and with full TLS (Thread Local Storage) support.☆90Updated last month
- monitors hidden syscalls called from call of duty anticheat☆86Updated 10 months ago
- ☆95Updated last year
- A high-performance C++ framework for emulating executable binaries☆127Updated last week
- A large collection of 32bit and 64bit PE files useful for verifying the correctness of bin2bin transformations☆61Updated last year
- A journal for $6,000 Riot Vanguard bounty.☆66Updated 2 years ago
- WinDbg extension written in Rust to dump the CPU / memory state of a running VM☆125Updated last month
- Hyper-V related resources☆31Updated last year
- Converted phnt (Native API header files from the System Informer project) to IDA TIL, IDC (Hex-Rays).☆158Updated last year
- Windows 11 24H2-25H2 Runtime PatchGuard Bypass☆215Updated 3 weeks ago
- compile-time control flow obfuscation using mba☆199Updated 2 years ago
- Harness to issue Virtual Secure Mode (VSM) "secure calls" from VTL 0 to VTL 1☆68Updated 2 months ago
- NovaHypervisor is a defensive x64 Intel host based hypervisor. The goal of this project is to protect against kernel based attacks (eithe…☆236Updated last month
- Different tools for Microsoft Hyper-V researching☆62Updated 4 months ago
- Contains all the applications developed for the Second part of the 7th Edition of Windows Internals book☆114Updated last year
- Exploit POC for CVE-2024-36877☆47Updated last year
- A Binary Ninja plugin to detect Themida, WinLicense and Code Virtualizer's obfuscated code locations.☆87Updated last year
- Report and exploit of CVE-2023-36427☆89Updated 2 years ago