Translates WinDbg "dt" structure dump to a C structure
☆133Oct 16, 2016Updated 9 years ago
Alternatives and similar repositories for windbg_to_c
Users that are interested in windbg_to_c are comparing it to the libraries listed below
Sorting:
- ☆17Oct 24, 2016Updated 9 years ago
- Hook IDT vector 0xb2 to detect SCI in 64bit windows.☆34Aug 27, 2022Updated 3 years ago
- codes for my blog post: https://secrary.com/Random/InstrumentationCallback/☆183Nov 30, 2017Updated 8 years ago
- Takes a Windbg dumped structure (using the 'dt' command) and formats it into a C structure☆37Jul 8, 2024Updated last year
- reverse engineering extension plugin for windbg☆121Sep 30, 2019Updated 6 years ago
- ☆33Sep 24, 2021Updated 4 years ago
- Elevation of privilege detector based on HyperPlatform☆123Mar 5, 2017Updated 9 years ago
- kernel pool windbg extension☆83Jul 23, 2015Updated 10 years ago
- ☆12Feb 19, 2017Updated 9 years ago
- Шаблон полнофункционального драйвера и обёртки над ядерным API☆114Aug 28, 2016Updated 9 years ago
- Debugger extension for the Debugging Tools for Windows (WinDbg, KD, CDB, NTSD).☆69Nov 14, 2016Updated 9 years ago
- A sample project for using Capstone from a driver in Visual Studio 2015☆36May 4, 2016Updated 9 years ago
- Demo List cm/ps/ob/minifilter callback And Patch/Bypass it☆29Dec 5, 2017Updated 8 years ago
- Wow64 syscall hook☆43May 28, 2017Updated 8 years ago
- Open Anti Cheat☆27Jul 16, 2022Updated 3 years ago
- A tool to help malware analysts tell that the sample is injecting code into other process.☆78Aug 12, 2015Updated 10 years ago
- ☆34Sep 22, 2017Updated 8 years ago
- kHypervisor is a lightweight bluepill-like nested VMM for Windows, it provides and emulating a basic function of Intel VT-x☆443Nov 29, 2021Updated 4 years ago
- just an lite AntiRootkit for interesting☆24Dec 9, 2015Updated 10 years ago
- This is a sample that shows how to leverage SetThreadContext for DLL injection☆85Sep 4, 2017Updated 8 years ago
- A driver that supports communication between a Windows guest and HyperWin☆15Jan 6, 2021Updated 5 years ago
- ☆14Jun 24, 2017Updated 8 years ago
- ☆14Jan 10, 2017Updated 9 years ago
- ☆14Aug 15, 2018Updated 7 years ago
- Detecting execution of kernel memory where is not backed by any image file☆261Jul 11, 2018Updated 7 years ago
- WinDBG Anti-RootKit Extension☆645Jul 29, 2020Updated 5 years ago
- c++ implementation of windows heavens gate☆70Feb 12, 2021Updated 5 years ago
- ☆36Oct 29, 2020Updated 5 years ago
- AllMemPro☆46Jan 15, 2018Updated 8 years ago
- C++ Exceptions in Windows Drivers☆221Dec 21, 2020Updated 5 years ago
- ☆48Jun 19, 2017Updated 8 years ago
- Simple program for static hooking dynamic libraries in executable application☆24Jan 15, 2014Updated 12 years ago
- A hypervisor hiding user-mode memory using EPT☆107Jan 28, 2018Updated 8 years ago
- windows kernelmode and usermode IAT hook☆149Mar 9, 2021Updated 4 years ago
- An example of how x64 kernel shellcode can dynamically find and use APIs☆104May 14, 2020Updated 5 years ago
- User-mode kernel callback framework☆10Nov 16, 2013Updated 12 years ago
- usermode standalone kernel interface☆111Jul 9, 2018Updated 7 years ago
- Hypervisor based tool for monitoring system register accesses.☆154Sep 13, 2018Updated 7 years ago
- PoC of BOOST-ed _EPROCESS.VadRoot iterating☆27May 21, 2014Updated 11 years ago