honorarybot / VmxCaps
Comparison table of VMX capabilities for a bunch of processors
☆12Updated 4 years ago
Related projects ⓘ
Alternatives and complementary repositories for VmxCaps
- Takes a Windbg dumped structure (using the 'dt' command) and formats it into a C structure☆33Updated 4 months ago
- Tools made for my Hyper-V blog series @ https://foxhex0ne.blogspot.com/☆54Updated 4 years ago
- Windbg extension that allows you analyze Control Flow Guard map☆36Updated 3 years ago
- ☆11Updated 4 years ago
- Figuring out the cause of a handle downgrade☆23Updated last year
- penter hook example and driver time recorder☆31Updated 7 years ago
- Analyze PatchGuard☆53Updated 6 years ago
- ☆33Updated 3 years ago
- Driver and WinDBG scripts to dump information about all resources and lookaside lists☆66Updated 4 years ago
- An Integrity-Check Monitoring Pintool☆56Updated 4 years ago
- Windows Hypervisor Platform client☆29Updated 6 years ago
- Random tools and things for creating+injecting complex organisms into a process on both the posix and windows platforms. Includes support…☆38Updated this week
- Decrement Windows Kernel for fun and profit☆39Updated 6 years ago
- Windows build files for the VMHunt Intel PIN Trace tool☆19Updated 5 years ago
- Experiments involving the Windows Hypervisor Platform☆17Updated 4 years ago
- x86 bootloader emulation with Miasm (case of NotPetya)☆40Updated 5 years ago
- AMD SVM hypervisor rootkit proof of concept☆42Updated last year
- a binary x86win32 code obfuscator using virtual machine☆32Updated 7 years ago
- VMCS Auditor provides almost all of Intel's VMCS Layout checklist based on Bochs Emulator.☆31Updated 5 years ago
- Windows 10 UAC bypass PoC using LaunchInfSection☆34Updated 6 years ago
- Import debugging traces from WinDBG into IDA. Color the graph, fill in the value of all the operands, etc.☆25Updated 12 years ago
- Obtain remote process cookies by performing a brute-force attack on ntdll.RtlDecodePointer using known pointer encodings.☆21Updated 7 years ago
- IDA plugin to explore and browse tags☆52Updated 5 years ago
- DirectNtApi - simple method to make ntapi function call without importing or walking export table. Work under Windows 7, 8 and 10☆52Updated 8 months ago
- An API Monitor based on Instrumentation☆42Updated 6 years ago
- Driver demonstrating how to register a DPC to asynchronously wait on an object☆48Updated 3 years ago
- Bypass for the hardening against usage of tagWnd as a kernel read/write primitive☆26Updated 7 years ago
- ☆24Updated 8 years ago
- ☆44Updated 4 years ago
- ☆21Updated 4 months ago