Alternatives and similar repositories for win32kext

Users that are interested in win32kext are comparing it to the libraries listed below

• SinaKarvandi / windbg2ida

  View on GitHub
  Windbg2ida lets you dump each step in Windbg then shows these steps in IDA
  ☆75Jul 6, 2024Updated last year
• bigric3 / CVE-2018-4901

  View on GitHub
  crash poc & Leak info PoC
  ☆18Mar 19, 2018Updated 7 years ago
• k0keoyo / SegmentHeapExt

  View on GitHub
  ☆41Jul 9, 2020Updated 5 years ago
• fdfalcon / TypeIsolationDbg

  View on GitHub
  A little WinDbg extension to help dump the state of Win32k Type Isolation structures.
  ☆38Feb 2, 2018Updated 8 years ago
• FlappyPig / WCTF-pigdriver

  View on GitHub
  by http://whereisk0shl.top/
  ☆35Jul 9, 2018Updated 7 years ago
• yuvatia / Win10GdiExploitation

  View on GitHub
  Exploiting HEVD's WriteWhatWhereIoctlDispatch for LPE on Windows 10 TH2 through RS3 using GDI objects.
  ☆24Jan 23, 2018Updated 8 years ago
• billti / v8dbg

  View on GitHub
  Sample WinDbg extension
  ☆15Jun 21, 2019Updated 6 years ago
• abarbatei / windbg-info

  View on GitHub
  collection of links related to using and improving windbg
  ☆20Jun 17, 2018Updated 7 years ago
• ohjeongwook / REPack

  View on GitHub
  Reverse engineering toolkit for exploit/malware analysis
  ☆35May 10, 2020Updated 5 years ago
• ntdiff / headers

  View on GitHub
  ☆176Oct 2, 2024Updated last year
• 0cch / 0cchext

  View on GitHub
  0CCh Windbg extension: include some useful commands
  ☆114Aug 1, 2023Updated 2 years ago
• MortenSchenk / tagWnd-Hardening-Bypass

  View on GitHub
  Bypass for the hardening against usage of tagWnd as a kernel read/write primitive
  ☆32Mar 22, 2017Updated 8 years ago
• MortenSchenk / LoadLibrary-CFG-Bypass

  View on GitHub
  Control Flow Guard bypass using LoadLibrary and IsBadCodePtr
  ☆46Jan 19, 2017Updated 9 years ago
• JKornev / cfgdump

  View on GitHub
  Windbg extension that allows you analyze Control Flow Guard map
  ☆38Oct 7, 2021Updated 4 years ago
• hugsy / windbg_js_scripts

  View on GitHub
  Toy scripts for playing with WinDbg JS API
  ☆243Jul 8, 2024Updated last year
• yardenshafir / PoolViewer

  View on GitHub
  An application to view and filter pool allocations from a dmp file on Windows 10 RS5+.
  ☆149Mar 2, 2023Updated 2 years ago
• sam-b / windows_kernel_address_leaks

  View on GitHub
  Examples of leaking Kernel Mode information from User Mode on Windows
  ☆629Jul 7, 2017Updated 8 years ago
• epakskape / greenshellcode

  View on GitHub
  Green shellcode challenge tools
  ☆22Apr 9, 2019Updated 6 years ago
• gdabah / win32k-bugs

  View on GitHub
  Dump of win32k POCs for bugs I've found
  ☆381Mar 6, 2022Updated 3 years ago
• pstolarz / dumpext

  View on GitHub
  WinDbg debugger extension library providing various tools to analyse, dump and fix (restore) Microsoft Portable Executable files for both…
  ☆84Aug 24, 2024Updated last year
• Winbagility / Winbagility

  View on GitHub
  [ARCHIVED] mov rax, ${Thalium/IceBox}; jmp rax;
  ☆76Jun 8, 2019Updated 6 years ago
• JaanusKaapPublic / HyperViper

  View on GitHub
  Toolkit for Hyper-V security research
  ☆157Mar 7, 2022Updated 3 years ago
• FSecureLABS / ViridianFuzzer

  View on GitHub
  Kernel driver to fuzz Hyper-V hypercalls
  ☆136Feb 15, 2019Updated 6 years ago
• Zero-Tang / virtchk

  View on GitHub
  Confirms the capability of Hardware-Accelerated Virtualization Technology.
  ☆10Oct 26, 2025Updated 3 months ago
• fishstiqz / poolinfo

  View on GitHub
  kernel pool windbg extension
  ☆83Jul 23, 2015Updated 10 years ago
• k0keoyo / CVE-2015-2546-Exploit

  View on GitHub
  ☆22May 25, 2017Updated 8 years ago
• Nerlant / SyscallDumper

  View on GitHub
  ☆19Jun 20, 2019Updated 6 years ago
• math1as / Windows-GDI-fuzzer

  View on GitHub
  Windows Graphics Device Interface (GDI+) fuzzer
  ☆130Aug 13, 2020Updated 5 years ago
• 0vercl0k / kdmp-parser

  View on GitHub
  A Windows kernel dump C++ parser library with Python 3 bindings.
  ☆213Oct 5, 2025Updated 4 months ago
• 0xcpu / ExecutiveCallbackObjects

  View on GitHub
  Research on Windows Kernel Executive Callback Objects
  ☆315Feb 22, 2020Updated 5 years ago
• in12hacker / VT_64_EPT

  View on GitHub
  createfile
  ☆50Oct 27, 2015Updated 10 years ago
• bluefrostsecurity / Meltdown-KVA-Shadow-Leak

  View on GitHub
  ☆49Jun 30, 2020Updated 5 years ago
• waleedassar / CVE-2022-24483

  View on GitHub
  POC For CVE-2022-24483
  ☆14Apr 12, 2022Updated 3 years ago
• zouxianyu / KernelHiddenExecute

  View on GitHub
  Hide codes/data in the kernel address space.
  ☆188May 8, 2021Updated 4 years ago
• synacktiv / Windows-kernel-SegmentHeap-Aligned-Chunk-Confusion

  View on GitHub
  PoC exploiting Aligned Chunk Confusion on Windows kernel Segment Heap
  ☆215Jul 2, 2020Updated 5 years ago
• ohjeongwook / windbgtool

  View on GitHub
  Windbg Utility Tools based upon PyKD
  ☆42Sep 9, 2020Updated 5 years ago
• wanttobeno / IDAStealth-v1.3.3

  View on GitHub
  IDA反-反调试插件 IDAStealth v1.3.3, created 06/28/2011, Jan Newger
  ☆21Apr 4, 2018Updated 7 years ago
• dro / win10-ida-types

  View on GitHub
  Windows 10 kernel and ntdll internal types, directly compatible with ida.
  ☆53Oct 14, 2018Updated 7 years ago
• RanchoIce / 44Con2018

  View on GitHub
  Slides of 44Con 2018
  ☆22Oct 11, 2018Updated 7 years ago