Alternatives and similar repositories for ioctlpus

Users that are interested in ioctlpus are comparing it to the libraries listed below

• jthuraisamy / DIRT

  View on GitHub
  Driver Initial Reconnaissance Tool
  ☆126Dec 26, 2019Updated 6 years ago
• VoidSec / ioctlpus

  View on GitHub
  IOCTLpus can be used to make DeviceIoControl requests with arbitrary inputs (with functionality somewhat similar to Burp Repeater).
  ☆96Dec 20, 2021Updated 4 years ago
• FSecureLABS / win_driver_plugin

  View on GitHub
  A tool to help when dealing with Windows IOCTL codes or reversing Windows drivers.
  ☆436Aug 22, 2018Updated 7 years ago
• IOActive / kmdf_re

  View on GitHub
  Helper idapython code for reversing kmdf drivers
  ☆74Jul 20, 2022Updated 3 years ago
• panoramixor / GDIObjDump

  View on GitHub
  ☆29Sep 18, 2015Updated 10 years ago
• wjcsharp / Common

  View on GitHub
  Shareds for kernel developement
  ☆29Dec 23, 2013Updated 12 years ago
• AzAgarampur / CorsairLLeak

  View on GitHub
  Corsair LL Access driver abuse
  ☆24Apr 16, 2021Updated 4 years ago
• koutto / ioctlbf

  View on GitHub
  Windows Kernel Drivers fuzzer
  ☆378Mar 15, 2017Updated 8 years ago
• Zero-Tang / SimpleWhpDemo

  View on GitHub
  Simple Demo of using Windows Hypervisor Platform
  ☆29Jul 14, 2025Updated 7 months ago
• jthuraisamy / av-fingerprints

  View on GitHub
  Antivirus Emulator Fingerprints
  ☆30Oct 12, 2018Updated 7 years ago
• alfarom256 / UserVAtoPhysical

  View on GitHub
  Walks the Process' VAD list to grab the PTE's corresponding to a usermode virtual address, all to get the physical address
  ☆23Nov 22, 2021Updated 4 years ago
• 0xcpu / WinAltSyscallHandler

  View on GitHub
  Some research on AltSystemCallHandlers functionality in Windows 10 20H1 18999
  ☆239Nov 6, 2019Updated 6 years ago
• adrianyy / nasm_shellcode

  View on GitHub
  NASM listing to shellcode converter
  ☆14May 6, 2018Updated 7 years ago
• fishstiqz / poolinfo

  View on GitHub
  kernel pool windbg extension
  ☆83Jul 23, 2015Updated 10 years ago
• blaquee / APCHook

  View on GitHub
  hooking KiUserApcDispatcher
  ☆25Apr 3, 2017Updated 8 years ago
• hlldz / APC-PPID

  View on GitHub
  Adds a user-mode asynchronous procedure call (APC) object to the APC queue of the specified thread and spoof the Parent Process.
  ☆158Jun 10, 2019Updated 6 years ago
• hfiref0x / Misc

  View on GitHub
  Miscellaneous Code and Docs
  ☆83Jul 12, 2025Updated 7 months ago
• ionescu007 / hazmat5

  View on GitHub
  Local OXID Resolver (LCLOR) : Research and Tooling
  ☆37May 19, 2021Updated 4 years ago
• ch3rn0byl / WinDbg-Extensions

  View on GitHub
  ☆18Mar 1, 2021Updated 4 years ago
• expend20 / DrSymLogger

  View on GitHub
  ☆22Oct 18, 2023Updated 2 years ago
• Toroto006 / windows-kernel-driver-pipeline

  View on GitHub
  This master thesis project continuously collects and analyses Microsoft Windows kernel drivers using static and dynamic methods to help s…
  ☆21Nov 4, 2024Updated last year
• tykawaii98 / CVE-2024-21338_PoC

  View on GitHub
  ☆42Jun 23, 2024Updated last year
• VoidSec / DriverBuddyReloaded

  View on GitHub
  Driver Buddy Reloaded is an IDA Pro Python plugin that helps automate some tedious Windows Kernel Drivers reverse engineering tasks
  ☆411Jul 4, 2025Updated 7 months ago
• zeze-zeze / HITCON-2023-Demo-CVE-2023-20562

  View on GitHub
  ☆61Aug 21, 2023Updated 2 years ago
• zodiacon / ErrorLookup

  View on GitHub
  Simple error lookup for Win32 and NTSTATUS errors
  ☆20Nov 25, 2018Updated 7 years ago
• xpn / RpcEnum

  View on GitHub
  An command-line RPC method enumerator, born out of RPCView's awesomeness
  ☆108Jul 31, 2019Updated 6 years ago
• hugsy / CFB

  View on GitHub
  CFB is a ProcMon-style tool designed to assist capturing IRPs sent to Windows drivers.
  ☆333Mar 26, 2024Updated last year
• ladislav-zezula / FileTest

  View on GitHub
  Source code for File Test - Interactive File System Test Tool
  ☆302Aug 13, 2025Updated 6 months ago
• eclypsium / Screwed-Drivers

  View on GitHub
  "Screwed Drivers" centralized information source for code references, links, etc.
  ☆372Mar 19, 2020Updated 5 years ago
• mdsecactivebreach / com_inject

  View on GitHub
  ☆208Apr 5, 2022Updated 3 years ago
• thalium / ida_kmdf

  View on GitHub
  ☆85Mar 2, 2025Updated 11 months ago
• VollRagm / PTView

  View on GitHub
  Browse Page Tables on Windows (Page Table Viewer)
  ☆234Apr 2, 2022Updated 3 years ago
• HyperSine / siren-hypervisor

  View on GitHub
  ☆39Mar 23, 2023Updated 2 years ago
• alal4465 / Practical-Reverse-Engineering-Solutions

  View on GitHub
  Some drivers I've written while solving exercises from Practical Reverse Engineering
  ☆15Jan 9, 2022Updated 4 years ago
• kasif-dekel / OSR_DeviceTree_Vuln

  View on GitHub
  ☆13Jan 12, 2022Updated 4 years ago
• markhc / windbg_to_c

  View on GitHub
  Translates WinDbg "dt" structure dump to a C structure
  ☆134Oct 16, 2016Updated 9 years ago
• yardenshafir / SymlinkCallback

  View on GitHub
  A driver that hooks C: volume using symbolic link callback to track all FS access to the volume
  ☆110Apr 24, 2020Updated 5 years ago
• jthuraisamy / TelemetrySourcerer

  View on GitHub
  Enumerate and disable common sources of telemetry used by AV/EDR.
  ☆819Mar 11, 2021Updated 4 years ago
• IOActive / FuzzNDIS

  View on GitHub
  A Fuzzer for Windows NDIS Drivers OID Handlers
  ☆95Nov 4, 2021Updated 4 years ago