progmboy / win32kext

Related projects ⓘ

Alternatives and complementary repositories for win32kext

• fishstiqz / poolinfo
  kernel pool windbg extension
  ☆79Updated 9 years ago
• SinaKarvandi / windbg2ida
  Windbg2ida lets you dump each step in Windbg then shows these steps in IDA
  ☆73Updated 4 months ago
• yardenshafir / KernelDataStructureFinder
  Driver and WinDBG scripts to dump information about all resources and lookaside lists
  ☆66Updated 4 years ago
• FSecureLABS / ViridianFuzzer
  Kernel driver to fuzz Hyper-V hypercalls
  ☆135Updated 5 years ago
• fdfalcon / TypeIsolationDbg
  A little WinDbg extension to help dump the state of Win32k Type Isolation structures.
  ☆38Updated 6 years ago
• 0vercl0k / symbolizer
  A fast execution trace symbolizer for Windows.
  ☆130Updated 6 months ago
• JaanusKaapPublic / BlogHyperV
  Tools made for my Hyper-V blog series @ https://foxhex0ne.blogspot.com/
  ☆54Updated 4 years ago
• cbayet / PoolSprayer
  Simple library to spray the Windows Kernel Pool
  ☆104Updated 4 years ago
• dro / win10-ida-types
  Windows 10 kernel and ntdll internal types, directly compatible with ida.
  ☆50Updated 6 years ago
• k0keoyo / SegmentHeapExt
  ☆38Updated 4 years ago
• BehroozAbbassi / VmwpMonitor
  ☆39Updated 3 years ago
• progmboy / cansecwest2017
  ☆62Updated 7 years ago
• synacktiv / vmx_intrinsics
  VMX intrinsics plugin for Hex-Rays decompiler
  ☆70Updated 5 years ago
• ajkhoury / Windbg2Struct
  Takes a Windbg dumped structure (using the 'dt' command) and formats it into a C structure
  ☆33Updated 4 months ago
• quarkslab / whvp
  PoC for a snapshot-based coverage-guided fuzzer targeting Windows kernel components
  ☆68Updated 3 years ago
• JaanusKaapPublic / HyperViper
  Toolkit for Hyper-V security research
  ☆155Updated 2 years ago
• tenable / mIDA
  ☆33Updated last year
• siberas / IDA2Sym
  IDAScript to create Symbol file which can be loaded in WinDbg via AddSyntheticSymbol
  ☆40Updated 10 years ago
• tandasat / EopMon
  Elevation of privilege detector based on HyperPlatform
  ☆117Updated 7 years ago
• redplait / armpatched
  clone of armadillo patched for windows
  ☆46Updated 3 weeks ago
• pgarba / UniTaint
  PoC for a taint based attack on VMProtect
  ☆109Updated 5 years ago
• IOActive / kmdf_re
  Helper idapython code for reversing kmdf drivers
  ☆67Updated 2 years ago
• Cr4sh / IDA-VMware-GDB
  Helper script for Windows kernel debugging with IDA Pro on VMware + GDB stub
  ☆76Updated 12 years ago
• intelpt / winafl-intelpt
  A fork of AFL for fuzzing Windows binaries
  ☆53Updated 5 years ago
• 0cch / 0cchext
  0CCh Windbg extension: include some useful commands
  ☆109Updated last year
• sgabe / SymlinkProtect
  File system minifilter driver for Windows to block symbolic link attacks.
  ☆51Updated 3 years ago
• sogeti-esec-lab / RPCForge
  Windows RPC Python fuzzer
  ☆157Updated 7 years ago
• 0xcpu / WinAltSyscallHandler
  Some research on AltSystemCallHandlers functionality in Windows 10 20H1 18999
  ☆206Updated 5 years ago