therealdreg / masm32-kernel-programmingLinks
masm32 kernel programming, drivers, tutorials, examples, and tools (credits Four-F)
☆125Updated 2 years ago
Alternatives and similar repositories for masm32-kernel-programming
Users that are interested in masm32-kernel-programming are comparing it to the libraries listed below
Sorting:
- msdocsviewer is a simple tool that parses Microsoft's win32 API and driver documentation to be used within IDA.☆152Updated last year
- Recon 2023 slides and code☆79Updated 2 years ago
- Advanced driver monitoring utility.☆216Updated 3 years ago
- An automation plugin for Tiny-Tracer framework to trace and watch functions directly out of the executable's import table or trace logs (…☆119Updated last year
- x86/x64 Ring 0/-2 System Freezer/Debugger☆119Updated 3 months ago
- A Python script to download PDB files associated with a Portable Executable (PE)☆125Updated 7 months ago
- A list of excellent resources for anyone to deepen their understanding with regards to Windows Kernel Exploitation and general low level …☆158Updated 2 years ago
- ☆113Updated last month
- The Windbg extensions to study Hyper-V on Intel and AMD processors.☆158Updated 2 weeks ago
- My notes while studying Windows exploitation☆190Updated 2 years ago
- Small tool to convert beteween the PE alignments (raw and virtual).☆95Updated 2 years ago
- A dynamic unpacking tool☆140Updated last year
- MalUnpack companion driver☆98Updated last year
- How to set up 2 VirtualBox VM to debug kernel driver using windbg☆55Updated 3 years ago
- GarbageMan is a set of tools for analyzing .NET binaries through heap analysis.☆115Updated 2 years ago
- Writeups for CTF challenges☆31Updated last year
- NovaHypervisor is a defensive x64 Intel host based hypervisor. The goal of this project is to protect against kernel based attacks (eithe…☆225Updated 2 months ago
- ☆147Updated 2 years ago
- Using Microsoft Warbird to automatically unpack and execute encrypted shellcode in ClipSp.sys without triggering PatchGuard☆253Updated 3 years ago
- Single header version of System Informer's phnt library.☆228Updated last week
- Simple x86/x64 Assembler/Disassembler/Emulator☆187Updated last year
- uefi diskless persistence technique + OVMF secureboot bypass☆91Updated last year
- This x64dbg plugin allows you to upload your sample to Malcore and view the results.☆37Updated 2 years ago
- Converted phnt (Native API header files from the System Informer project) to IDA TIL, IDC (Hex-Rays).☆152Updated last year
- Vulnerable driver research tool, result and exploit PoCs☆214Updated last year
- ☆153Updated last month
- An x64dbg plugin which marks XFG call signatures as data☆77Updated 2 years ago
- a PE Loader and Windows API tracer. Useful in malware analysis.☆143Updated 2 years ago
- Contains all the applications developed for the Second part of the 7th Edition of Windows Internals book☆113Updated last year
- Helpful WinDBG command for kernel debugging☆24Updated 4 years ago