toolboc / Windows-Research-Kernel-Hacking

Related projects: ⓘ

• gerhart01 / LiveCloudKd
  Hyper-V Research is trendy now
  ☆146Updated last month
• hfiref0x / NtCall64
  Windows NT x64 syscall fuzzer
  ☆584Updated last year
• Fare9 / Windows-Internals
  My repository to upload drivers from different books and all the information related to windows internals.
  ☆153Updated 5 years ago
• ainfosec / MoRE
  TLB splitting VMM
  ☆161Updated 8 years ago
• Zero-Tang / NoirVisor
  The Grimoire Hypervisor solution for x86 Processors with experimental nested virtualization support.
  ☆434Updated last month
• ionescu007 / Simpleator
  Simpleator ("Simple-ator") is an innovative Windows-centric x64 user-mode application emulator that leverages several new features that w…
  ☆333Updated 5 years ago
• tandasat / SimpleSvm
  A minimalistic educational hypervisor for Windows on AMD processors.
  ☆314Updated 9 months ago
• 0xcpu / ExecutiveCallbackObjects
  Research on Windows Kernel Executive Callback Objects
  ☆277Updated 4 years ago
• tinysec / windows-syscall-table
  windows syscall table from xp ~ 10 rs4
  ☆348Updated 6 years ago
• ionescu007 / winipt
  The Windows Library for Intel Process Trace (WinIPT) is a project that leverages the new Intel Processor Trace functionality exposed by W…
  ☆361Updated last year
• m0n0ph1 / IAT-Hooking-Revisited
  Import address table (IAT) hooking is a well documented technique for intercepting calls to imported functions.
  ☆210Updated 6 years ago
• LordNoteworthy / windows-internals
  My notes while studying Windows internals
  ☆387Updated this week
• ionescu007 / hdk
  (unofficial) Hyper-V® Development Kit
  ☆215Updated 7 months ago
• 9176324 / WRK
  The Windows Research Kernel v1.2 contains the sources for the core of the Windows (NTOS) kernel and a build environment for a kernel that…
  ☆78Updated 5 years ago
• amiryeshurun / HyperWin
  A native hypervisor designed for the Windows operating system
  ☆120Updated 3 years ago
• wbaby / ntoskrnl
  ☆135Updated this week
• rohaaan / hypervisor-for-beginners
  Intel Vt-x/EPT based thin-hypervisor for windows with minimum possible code.
  ☆162Updated 6 years ago
• markhc / windbg_to_c
  Translates WinDbg "dt" structure dump to a C structure
  ☆126Updated 7 years ago
• IgorKorkin / MemoryRanger
  MemoryRanger protects kernel data and code by running drivers and hosting data in isolated kernel enclaves using VT-x and EPT features. M…
  ☆217Updated 4 years ago
• eyalz800 / zpp_hypervisor
  A very simple hypervisor for learning experience.
  ☆132Updated 2 years ago
• Zer0Mem0ry / ntoskrnl
  ☆549Updated this week
• Fyyre / kerneldetective
  Kernel Detective
  ☆133Updated 2 years ago
• tandasat / SimpleSvmHook
  SimpleSvmHook is a research purpose hypervisor for Windows on AMD processors.
  ☆345Updated 3 years ago
• abhisek / Pe-Loader-Sample
  Proof of concept implementation of in-memory PE Loader based on ReflectiveDLLInjection Technique
  ☆148Updated 5 years ago
• ZoloZiak / WinNT4
  Windows NT4 Kernel Source code
  ☆314Updated 12 years ago
• AndreyBazhan / SymStore
  The history of Windows Internals via symbols.
  ☆175Updated 2 years ago
• sam-b / windows_kernel_address_leaks
  Examples of leaking Kernel Mode information from User Mode on Windows
  ☆574Updated 7 years ago
• killvxk / DisableWin10PatchguardPoc
  pseudo-code to show how to disable patchguard with win10
  ☆296Updated 6 years ago
• 0xcpu / WinAltSyscallHandler
  Some research on AltSystemCallHandlers functionality in Windows 10 20H1 18999
  ☆203Updated 4 years ago
• intelpt / WindowsIntelPT
  This driver implements the Intel Processor Trace functionality in Intel Skylake architecture for Microsoft Windows
  ☆416Updated 6 years ago