jthuraisamy / ioctlpus
☆107Updated 4 years ago
Related projects: ⓘ
- Driver Initial Reconnaissance Tool☆119Updated 4 years ago
- ☆68Updated 2 years ago
- Process reimaging proof of concept code☆95Updated 5 years ago
- FLARE Kernel Shellcode Loader☆176Updated 5 years ago
- Parsers for custom malware formats ("Funky malware formats")☆92Updated 2 years ago
- IOCTLpus can be used to make DeviceIoControl requests with arbitrary inputs (with functionality somewhat similar to Burp Repeater).☆81Updated 2 years ago
- ☆84Updated this week
- Simple 32/64-bit PEs loader.☆135Updated 5 years ago
- Windows Drivers☆95Updated 5 years ago
- ☆66Updated last year
- ☆151Updated 3 years ago
- Proxy system calls over an RPC channel☆96Updated 2 years ago
- Hyper-V Research is trendy now☆169Updated 4 months ago
- ☆123Updated this week
- ☆49Updated this week
- Some research on AltSystemCallHandlers functionality in Windows 10 20H1 18999☆203Updated 4 years ago
- Set of antianalysis techniques found in malware☆124Updated last year
- Windows NT ioctl bruteforcer and modular fuzzer☆119Updated 5 years ago
- Go Lang Portable Executable Parser☆37Updated 3 years ago
- Shellcode emulator written with Unicorn Framework With Process Dump Emulation Environment☆117Updated 4 years ago
- Basic Windows Kernel Programming☆120Updated 4 years ago
- An application to view and filter pool allocations from a dmp file on Windows 10 RS5+.☆121Updated last year
- Recon 2015 Presentation from Alex Ionescu☆228Updated 8 years ago
- Local OXID Resolver (LCLOR) : Research and Tooling☆31Updated 3 years ago
- PoC exploiting Aligned Chunk Confusion on Windows kernel Segment Heap☆194Updated 4 years ago
- Simple library to spray the Windows Kernel Pool☆102Updated 4 years ago
- A process overwriting its own PEB to make an illusion that it has been loaded from a different path.☆91Updated 3 years ago
- Helper idapython code for reversing kmdf drivers☆68Updated 2 years ago
- A helper utility for creating shellcodes. Cleans MASM file generated by MSVC, gives refactoring hints.☆157Updated 2 months ago
- Process Hollowing for 32 bit and 64 bit☆78Updated 6 years ago