dmaivel / ntoseyeLinks
Windows kernel debugger for Linux hosts running Windows under KVM/QEMU
☆96Updated 4 months ago
Alternatives and similar repositories for ntoseye
Users that are interested in ntoseye are comparing it to the libraries listed below
Sorting:
- bypassing intel txt's tboot integrity checks via coreboot shim☆81Updated 6 months ago
- The Windbg extensions to study Hyper-V on Intel and AMD processors.☆167Updated last month
- dynamic binary instrumentation, analysis, and patching framework☆94Updated last week
- Generate a PDB file given the old PDB file and an address mapping☆49Updated last month
- C++ macro for x64 programs that breaks ida hex-rays decompiler tool.☆128Updated last year
- ☆94Updated last year
- Rewrite and obfuscate code in compiled binaries☆256Updated 2 weeks ago
- Abusing exceptions for code execution.☆113Updated 2 years ago
- An x64dbg plugin which helps make sense of long C++ symbols☆59Updated 2 years ago
- ☆24Updated last month
- A set of LLVM and GCC based plugins that perform code obfuscation.☆130Updated last month
- ☆153Updated 2 months ago
- WinDbg extension written in Rust to dump the CPU / memory state of a running VM☆124Updated 3 weeks ago
- Report and exploit of CVE-2024-21305.☆38Updated last year
- Contains all the applications developed for the Second part of the 7th Edition of Windows Internals book☆114Updated last year
- A Binary Ninja plugin to detect Themida, WinLicense and Code Virtualizer's obfuscated code locations.☆82Updated last year
- Converted phnt (Native API header files from the System Informer project) to IDA TIL, IDC (Hex-Rays).☆156Updated last year
- Proof-of-concept game using VBS enclaves to protect itself from cheating☆43Updated 10 months ago
- A large collection of 32bit and 64bit PE files useful for verifying the correctness of bin2bin transformations☆57Updated last year
- Rust library for lifting raw binary data to LLVM IR☆59Updated 2 months ago
- Research-focused hypervisor offering advanced tools for debugging, virtual machine introspection, and automation.☆40Updated 3 weeks ago
- NovaHypervisor is a defensive x64 Intel host based hypervisor. The goal of this project is to protect against kernel based attacks (eithe…☆228Updated 2 months ago
- Report and exploit of CVE-2023-36427☆90Updated last year
- Sample/PoC Windows kernel driver for detect DMA devices by using Vendor ID and Device ID signatures☆35Updated last year
- compile-time control flow obfuscation using mba☆194Updated 2 years ago
- Windows KASLR bypass using prefetch side-channel☆128Updated last year
- A Windows executable (PE) packer (x64) with LZMA compression and with full TLS (Thread Local Storage) support☆78Updated 2 weeks ago
- Different tools for Microsoft Hyper-V researching☆61Updated 2 months ago
- monitors hidden syscalls called from call of duty anticheat☆86Updated 8 months ago
- An x86-64 code virtualizer for VM based obfuscation☆138Updated 9 months ago