thesecretclub / Vagrant-Kernel-Debug-SampleLinks
Sample project for kernel debugging automation with Vagrant
☆60Updated 5 years ago
Alternatives and similar repositories for Vagrant-Kernel-Debug-Sample
Users that are interested in Vagrant-Kernel-Debug-Sample are comparing it to the libraries listed below
Sorting:
- Retrieve pointers to undocumented kernel functions and offsets to members within undocumented structures to use in your driver by using t…☆63Updated 6 years ago
- Enumerate user mode shared memory mappings on Windows.☆123Updated 4 years ago
- This is a simple driver with x64 inline assembly☆57Updated 5 years ago
- An automatic tool for fixing dumped PE files☆41Updated 5 years ago
- ☆48Updated 5 years ago
- Windbg2ida lets you dump each step in Windbg then shows these steps in IDA☆73Updated last year
- Resolve DOS MZ executable symbols at runtime☆95Updated 3 years ago
- A collection of tools, source code, and papers researching Windows' implementation of CET.☆85Updated 5 years ago
- Open Course for diving security internal☆51Updated 5 years ago
- This is a place to share my miscellaneous projects.☆114Updated 5 years ago
- ☆68Updated 4 years ago
- reverse engineering extension plugin for windbg☆119Updated 6 years ago
- An example of how x64 kernel shellcode can dynamically find and use APIs☆104Updated 5 years ago
- Helper idapython code for reversing kmdf drivers☆75Updated 3 years ago
- Driver demonstrating how to register a DPC to asynchronously wait on an object☆50Updated 4 years ago
- IDA script for vmprotect Windows Api address decoder☆51Updated 4 years ago
- PoC for hiding PE exports☆67Updated 4 years ago
- Hooking the GDT - Installing a Call Gate. POC for Rootkit Arsenal Book Second Edition (version 2022)☆73Updated 2 years ago
- Takes a Windbg dumped structure (using the 'dt' command) and formats it into a C structure☆36Updated last year
- Command like tool to print mitigation flags for running processes in a memory dump☆47Updated 5 years ago
- A fast execution trace symbolizer for Windows.☆131Updated last year
- This utility allows you to lock every available memory regions of an arbitrary process into its working set.☆69Updated 2 years ago
- IntroVirt is an guest introspection library for KVM☆56Updated last year
- (DEPRECATED) A simple anti-anti debug library for Windows☆30Updated 5 years ago
- Multi-purpose proof-of-concept tool based on CPU-Z CVE-2017-15303☆109Updated 7 years ago
- A driver that hooks C: volume using symbolic link callback to track all FS access to the volume☆110Updated 5 years ago
- A tool to help malware analysts tell that the sample is injecting code into other process.☆78Updated 10 years ago
- ☆22Updated 5 years ago
- clone of armadillo patched for windows☆47Updated 11 months ago
- ☆43Updated 3 years ago