thalium / ida_kmdfView external linksLinks
☆85Mar 2, 2025Updated 11 months ago
Alternatives and similar repositories for ida_kmdf
Users that are interested in ida_kmdf are comparing it to the libraries listed below
Sorting:
- AngrPT recover the Windows Driver's DeviceIoControl Interface and Dependencies for getting higher coverage in Fuzzing Process.☆19Jan 20, 2026Updated 3 weeks ago
- Overview of Microsoft Patch Tuesday☆14Sep 13, 2024Updated last year
- Tool for PDB generation from IDA Pro database☆12Jul 27, 2020Updated 5 years ago
- Export IDA microcode to BinExport format so that you can use BinDiff to diff microcodes☆12Sep 21, 2024Updated last year
- 正确解析 _HEAP_VS_***符号 ,支持在最新win11 24h2 运行,替换windbg自带的!pool命令☆17Nov 30, 2024Updated last year
- Security research helper for CLFS drivers☆16Sep 5, 2024Updated last year
- Remove WPP calls from hexrays decompiled code☆56Jan 31, 2026Updated 2 weeks ago
- Windows Kernel Pool (clfs.sys) Corruption Privilege Escalation☆128Mar 22, 2024Updated last year
- msFuzz is a coverage-guided fuzzer for Windows kernel drivers that utilizes Intel PT and leverages constraint and dependency analysis to …☆217Dec 24, 2025Updated last month
- ☆41Jun 23, 2024Updated last year
- IDA Pro plugin that helps reconstruct structures☆256Jan 15, 2026Updated last month
- Using MMIO (Memory-Mapped I/O) to read TPM 2.0 public Endorsement Key.☆53May 29, 2024Updated last year
- Medigate plugin for c++ reverse engineering and other utils☆295May 25, 2023Updated 2 years ago
- Vulnerable driver research tool, result and exploit PoCs☆228Nov 1, 2023Updated 2 years ago
- ☆61Aug 21, 2023Updated 2 years ago
- Kernel ReClassEx☆66Nov 21, 2023Updated 2 years ago
- 2019 Advent Calendar, vmware pwnables☆50Jul 21, 2020Updated 5 years ago
- Ghidra data type archive for Windows driver analysis☆29Oct 10, 2024Updated last year
- Convert IDA Type Library `*.til` to Compilable C Header!☆20Mar 9, 2023Updated 2 years ago
- LPE exploit for CVE-2023-36802☆167Oct 10, 2023Updated 2 years ago
- A working version of this tutorial: https://docs.microsoft.com/en-us/windows/desktop/rpc/tutorial☆16Jun 22, 2019Updated 6 years ago
- UnknownField is a tool based clang that obfuscating the order of fields to protect your C/C++ game or code.☆44Jan 21, 2023Updated 3 years ago
- HexRays ctree visualization plugin☆437Sep 6, 2024Updated last year
- ☆66May 25, 2023Updated 2 years ago
- ☆149Jan 25, 2024Updated 2 years ago
- Accelerated execution for fast Windows fuzzing☆25Jan 9, 2025Updated last year
- Converted phnt (Native API header files from the System Informer project) to IDA TIL, IDC (Hex-Rays).☆163Aug 23, 2024Updated last year
- Monitor ETW events for Windows process mitigation policies, with stack traces☆31Oct 7, 2022Updated 3 years ago
- Exploit for CVE-2023-29360 targeting MSKSSRV.SYS driver☆153Oct 12, 2023Updated 2 years ago
- Dump PDB Symbols including support for Bochs Debugging Format (with wine support)☆14Aug 11, 2023Updated 2 years ago
- IDA Pro Folder Management Made Easy☆18Dec 24, 2024Updated last year
- Alleycat plugin by devttys0, ported to IDA 8☆11Jan 15, 2025Updated last year
- Hex-Rays microcode plugin for automated simplification of Windows Kernel decompilation.☆643Jan 28, 2025Updated last year
- ☆22Oct 18, 2023Updated 2 years ago
- XPN's RpcEnum but based on IDA instead of Ghidra☆21Aug 17, 2019Updated 6 years ago
- Driver Buddy Reloaded is an IDA Pro Python plugin that helps automate some tedious Windows Kernel Drivers reverse engineering tasks☆411Jul 4, 2025Updated 7 months ago
- Exploit targeting NT kernel in 24H2 Windows Insider Preview☆150Apr 26, 2024Updated last year
- ☆27Jan 17, 2026Updated 3 weeks ago
- Hook syscalls from ring0 without triggering PatchGuard☆24Oct 29, 2025Updated 3 months ago