gmh5225 / ntoskrnl_file_collection
Collect various versions of ntoskrnl files
☆50Updated last year
Alternatives and similar repositories for ntoskrnl_file_collection:
Users that are interested in ntoskrnl_file_collection are comparing it to the libraries listed below
- ☆128Updated 2 years ago
- Collect different versions of Crucial modules.☆130Updated 8 months ago
- ☆65Updated 6 years ago
- D☆42Updated 3 years ago
- ☆95Updated 7 years ago
- a monitoring windows driver calls kernel api tools☆103Updated 8 months ago
- ☆123Updated 4 years ago
- 收集常用windows版本内核文件☆32Updated last year
- first commit☆59Updated 4 years ago
- Windows PDB parser for kernel-mode environment.☆95Updated 2 years ago
- 可在非测试模式下符号化读取内核内存。Kernel memory can be read symbolically in non test mode。☆107Updated 2 years ago
- An example of a client and server using Windows' ALPC functions to send and receive data.☆95Updated 2 months ago
- Static user/kernel mode library that allows access to all functions and global variables by extracting offsets from the PDB☆85Updated this week
- Demystifying PatchGuard is a comprehensive analysis of Microsoft's security feature called PatchGuard, which is designed to prevent unaut…☆119Updated last year
- windows kernel pagehook☆39Updated 2 years ago
- Resolve DOS MZ executable symbols at runtime☆95Updated 3 years ago
- ☆69Updated 2 years ago
- 让Etwhook再次伟大! Make InfinityHook Great Again!☆134Updated 3 years ago
- This project migrated to https://github.com/backengineering/llvm-msvc☆82Updated last year
- based on https://github.com/secrary/Hooking-via-InstrumentationCallback☆69Updated 5 years ago
- DSE & PG bypass via BYOVD attack☆45Updated 11 months ago
- a Windows kernel Pdb parsing and downloading library that running purely in kernel mode without any R3 programs.☆154Updated 6 months ago
- Ghetto user mode emulation of Windows kernel drivers.☆133Updated 5 months ago
- Windows kernel drivers simple HTTP library for modern C++☆42Updated 6 years ago
- A ProcMon-esque tool for monitoring Windows Kernel Drivers☆56Updated 3 years ago
- Using C++ STL on Windows kernle development☆88Updated 6 years ago
- x64 Windows implementation of virtual-address to physical-address translation☆40Updated 3 years ago
- ☆69Updated 3 years ago
- A basic 100 loc CPU emulator using the existing code of ntoskrnl.exe☆71Updated last year
- nmi stackwalking + module verification☆108Updated last year