ssaroussi / Griffin-Hypervisor

Related projects: ⓘ

• SouhailHammou / KernelSymbolsHelper
  Retrieve pointers to undocumented kernel functions and offsets to members within undocumented structures to use in your driver by using t…
  ☆52Updated 5 years ago
• Cr4sh / PTBypass-PoC
  Bypassing code hooks detection in modern anti-rootkits via building faked PTE entries.
  ☆72Updated 13 years ago
• omerk2511 / NotifyRoutinesResearch
  A research project about Windows notify routines.
  ☆34Updated 4 years ago
• spudgy / x64-AsmTracker
  ☆21Updated this week
• ajkhoury / Windbg2Struct
  Takes a Windbg dumped structure (using the 'dt' command) and formats it into a C structure
  ☆33Updated 2 months ago
• MeeSong / Sunstrider
  Analyze PatchGuard
  ☆53Updated 6 years ago
• t3ssellate / unmapper
  An automatic tool for fixing dumped PE files
  ☆42Updated 4 years ago
• SinaKarvandi / x64-Driver-Inline-Assembly
  This is a simple driver with x64 inline assembly
  ☆52Updated 4 years ago
• yuvatia / page-table-exploitation
  A demonstration of how page tables can be used to run arbitrary code in ring-0 and lead to a privesc. Uses CVE-2016-7255 as an example.
  ☆11Updated 6 years ago
• Gbps / CapcomLib
  A reflexive driver loader to bypass Windows DSE (featuring a custom PE loader)
  ☆37Updated 6 years ago
• tandasat / ia32-doc
  IA32-doc is a project which aims to put as many definitions from the Intel Manual into machine-processable format as possible
  ☆16Updated 2 years ago
• tandasat / HelloIommuPkg
  The sample DXE runtime driver demonstrating how to program DMA remapping.
  ☆57Updated 8 months ago
• Microwave89 / drvtricks
  drvtriks kernel driver for Windows 7 SP1 and 8.1 x64, that tricks around in your system.
  ☆31Updated 6 years ago
• calware / HV-Playground
  A simple and heavily documented series of test hypervisors built for 64-bit Windows 10 systems running under Intel's VT-x
  ☆29Updated 3 years ago
• KelvinMsft / Notes
  Open Course for diving security internal
  ☆51Updated 4 years ago
• SinaKarvandi / Pinitor
  An API Monitor based on Instrumentation
  ☆40Updated 6 years ago
• SinaKarvandi / VMCS-Auditor
  VMCS Auditor provides almost all of Intel's VMCS Layout checklist based on Bochs Emulator.
  ☆32Updated 5 years ago
• nlog2n / x86obfuscator
  a binary x86win32 code obfuscator using virtual machine
  ☆32Updated 7 years ago
• 0x25bit / Labs
  ☆33Updated 5 years ago
• dro / win10-ida-types
  Windows 10 kernel and ntdll internal types, directly compatible with ida.
  ☆50Updated 5 years ago
• alex9191 / KernelModeMonitor
  ☆31Updated this week
• Barakat / windows.sandbox
  Windows sandbox PoC
  ☆29Updated 4 years ago
• wbenny / awesome-virtualization
  Collection of resources about Virtualization
  ☆10Updated 4 years ago
• yuvatia / Win10GdiExploitation
  Exploiting HEVD's WriteWhatWhereIoctlDispatch for LPE on Windows 10 TH2 through RS3 using GDI objects.
  ☆24Updated 6 years ago
• namealt / winsdk10
  ☆26Updated 6 years ago
• 9176324 / Daat
  a simple intel vt code both support x86 & x64. PatchGuard monitor.
  ☆74Updated 2 years ago
• zhuyue1314 / stoned-UEFI-bootkit
  ☆27Updated 8 years ago
• vmcall / wow64pp
  A modern c++ implementation of windows heavens gate
  ☆8Updated 4 years ago
• kevinalmansa / TLS_Examples
  Examples of Static and Dynamic Thread Local Storage Callback Creation
  ☆19Updated 7 years ago
• tandasat / RemoteWriteMonitor
  A tool to help malware analysts tell that the sample is injecting code into other process.
  ☆73Updated 9 years ago