tandasat / hvext
The Windbg extensions to study Hyper-V on Intel and AMD processors.
☆147Updated this week
Alternatives and similar repositories for hvext:
Users that are interested in hvext are comparing it to the libraries listed below
- A tool that is used to hunt vulnerabilities in x64 WDM drivers☆173Updated last year
- ☆141Updated last year
- Contains all the applications developed for the Second part of the 7th Edition of Windows Internals book☆105Updated 7 months ago
- Post exploitation technique to turn arbitrary kernel write / increment into full read/write primitive on Windows 11 22H2☆224Updated 2 years ago
- Abusing exceptions for code execution.☆109Updated 2 years ago
- Unofficial Common Log File System (CLFS) Documentation☆169Updated 3 years ago
- IOCTLpus can be used to make DeviceIoControl requests with arbitrary inputs (with functionality somewhat similar to Burp Repeater).☆88Updated 3 years ago
- A collection of tools, source code, and papers researching Windows' implementation of CET.☆79Updated 4 years ago
- WinDbg extension written in Rust to dump the CPU / memory state of a running VM☆113Updated 3 months ago
- msdocsviewer is a simple tool that parses Microsoft's win32 API and driver documentation to be used within IDA.☆148Updated last year
- Report and exploit of CVE-2023-36427☆89Updated last year
- masm32 kernel programming, drivers, tutorials, examples, and tools (credits Four-F)☆118Updated last year
- Static Binary Instrumentation tool for Windows x64 executables☆196Updated 2 weeks ago
- An application to view and filter pool allocations from a dmp file on Windows 10 RS5+.☆135Updated last year
- Windows kernel debugger for Linux hosts running Windows under KVM/QEMU☆68Updated 3 months ago
- Converted phnt (Native API header files from the System Informer project) to IDA TIL, IDC (Hex-Rays).☆125Updated 5 months ago
- ☆143Updated last year
- Recon 2023 slides and code☆79Updated last year
- Python bindings for the Icicle emulator.☆25Updated last month
- Windows KASLR bypass using prefetch side-channel☆76Updated 9 months ago
- A list of excellent resources for anyone to deepen their understanding with regards to Windows Kernel Exploitation and general low level …☆135Updated 2 years ago
- Using Microsoft Warbird to automatically unpack and execute encrypted shellcode in ClipSp.sys without triggering PatchGuard☆243Updated 2 years ago
- Hyper-V related resources☆30Updated 11 months ago
- Advanced driver monitoring utility.☆203Updated 2 years ago
- ☆43Updated 3 years ago
- A Python script to download PDB files associated with a Portable Executable (PE)☆119Updated last week
- CMake template for a basic EFI application/bootkit. This library is header-only, there is no EDK2 runtime!).☆76Updated 2 years ago
- ☆157Updated 3 years ago
- A simple hypervisor demonstrating the use of the Intel VT-rp (redirect protection) technology.☆100Updated 10 months ago
- ☆82Updated 8 months ago