DriverBuddy is an IDA Python script to assist with the reverse engineering of Windows kernel drivers.
☆384Jan 8, 2020Updated 6 years ago
Alternatives and similar repositories for DriverBuddy
Users that are interested in DriverBuddy are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- A tool to help when dealing with Windows IOCTL codes or reversing Windows drivers.☆440Aug 22, 2018Updated 8 years ago
- IDA Plugin which decodes Windows Device I/O control code into DeviceType, FunctionCode, AccessType and MethodType.☆121Dec 1, 2023Updated 2 years ago
- Examples of leaking Kernel Mode information from User Mode on Windows☆646Jul 7, 2017Updated 9 years ago
- idahunt is a framework to analyze binaries with IDA Pro and hunt for things in IDA Pro☆394Sep 21, 2023Updated 3 years ago
- IDA PRO auto-renaming plugin with tagging support☆793Aug 19, 2026Updated last month
- GPUs on demand by Runpod - Special Offer Available • AdRun AI, ML, and HPC workloads on powerful cloud GPUs—without limits or wasted spend. Deploy GPUs in under a minute and pay by the second.
- ☆482Mar 31, 2018Updated 8 years ago
- Papers, blogposts, tutorials etc for learning about Windows kernel exploitation, internals and (r|b)ootkits☆422Jan 2, 2020Updated 6 years ago
- IDA Pro plugin which improves work with HexRays decompiler and helps in process of reconstruction structures and classes☆1,541Aug 11, 2024Updated 2 years ago
- Cross Platform Kernel Fuzzer Framework☆455Oct 11, 2018Updated 8 years ago
- ☆233Sep 10, 2017Updated 9 years ago
- Function Prefixing for IDA Pro☆150Apr 24, 2020Updated 6 years ago
- IDAPython tool for creating automatic C++ virtual tables in IDA Pro☆1,404Jul 4, 2021Updated 5 years ago
- kernel exploitation helper class☆77Nov 26, 2016Updated 9 years ago
- Dynamic IDA Enrichment☆479Mar 2, 2022Updated 4 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Hex-Rays Decompiler plugin for better code navigation☆2,647Nov 27, 2025Updated 10 months ago
- Windows NT ioctl bruteforcer and modular fuzzer☆127Jan 15, 2019Updated 7 years ago
- VMAttack PlugIn for IDA Pro☆891Nov 30, 2017Updated 8 years ago
- A Coverage Explorer for Reverse Engineers☆2,609Feb 14, 2026Updated 8 months ago
- Windows RPC Python fuzzer☆164Nov 14, 2017Updated 8 years ago
- Incident Response & Digital Forensics Debugging Extension☆399Dec 11, 2018Updated 7 years ago
- IDA 2016 plugin contest winner! Symbolic Execution just one-click away!☆1,634Jun 11, 2025Updated last year
- Flexible Register/Instruction Extender aNd Documentation☆563Sep 27, 2022Updated 4 years ago
- Pocs for Antivirus Software‘s Kernel Vulnerabilities☆264Jul 6, 2017Updated 9 years ago
- Open source password manager - Proton Pass • AdSecurely store, share, and autofill your credentials with Proton Pass, the end-to-end encrypted password manager trusted by millions.
- IPython console integration for IDA Pro☆857Aug 27, 2026Updated last month
- Windows Object Explorer 64-bit☆1,985Oct 6, 2026Updated last week
- Debugger extension for the Debugging Tools for Windows (WinDbg, KD, CDB, NTSD).☆69Nov 14, 2016Updated 9 years ago
- Dump of win32k POCs for bugs I've found☆380Mar 6, 2022Updated 4 years ago
- Labeless is a multipurpose IDA Pro plugin system for labels/comments synchronization with a debugger backend, with complex memory dumping…☆586Feb 23, 2026Updated 7 months ago
- IDA Pro Instruction Reference Plugin☆649Oct 20, 2021Updated 4 years ago
- pdbex is a utility for reconstructing structures and unions from the PDB into compilable C headers☆913Jun 18, 2025Updated last year
- MemoryRanger protects kernel data and code by running drivers and hosting data in isolated kernel enclaves using VT-x and EPT features. M…☆248Aug 31, 2026Updated last month
- WinDBG Anti-RootKit Extension☆641Jul 29, 2020Updated 6 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- abyss - augmentation of Hexrays decompiler output☆349Oct 26, 2022Updated 3 years ago
- CFB is a ProcMon-style tool designed to assist capturing IRPs sent to Windows drivers.☆339Mar 26, 2024Updated 2 years ago
- ☆62Apr 13, 2017Updated 9 years ago
- Monitor activity of any driver☆355Nov 2, 2020Updated 5 years ago
- PEDA-like debugger UI for WinDbg☆205Mar 29, 2024Updated 2 years ago
- IDA PDB Loader☆48Sep 21, 2018Updated 8 years ago
- A list of IDA Plugins☆3,843May 31, 2024Updated 2 years ago