Alternatives and similar repositories for cfg-showcase

Users that are interested in cfg-showcase are comparing it to the libraries listed below

• fishstiqz / poolinfo
  kernel pool windbg extension
  ☆84Updated 10 years ago
• SinaKarvandi / windbg2ida
  Windbg2ida lets you dump each step in Windbg then shows these steps in IDA
  ☆73Updated last year
• long123king / tokenext
  A windbg extension, extracting token related contents
  ☆41Updated 4 years ago
• mandiant / unicorn-libemu-shim
  libemu shim layer and win32 environment for Unicorn Engine
  ☆72Updated 8 years ago
• IgorKorkin / AllMemPro
  AllMemPro
  ☆46Updated 7 years ago
• progmboy / win32kext
  windbg plugin for win32k debugging
  ☆75Updated 6 years ago
• fdfalcon / TypeIsolationDbg
  A little WinDbg extension to help dump the state of Win32k Type Isolation structures.
  ☆38Updated 7 years ago
• ajkhoury / Windbg2Struct
  Takes a Windbg dumped structure (using the 'dt' command) and formats it into a C structure
  ☆36Updated last year
• tandasat / EopMon
  Elevation of privilege detector based on HyperPlatform
  ☆123Updated 8 years ago
• BreakingMalwareResearch / CFGExceptions
  Adding exceptions to Microsoft's Control Flow Guard (CFG)
  ☆57Updated 9 years ago
• synacktiv / vmx_intrinsics
  VMX intrinsics plugin for Hex-Rays decompiler
  ☆71Updated 5 years ago
• renorobert / slatmmu
  ☆11Updated 5 years ago
• Winbagility / Winbagility
  [ARCHIVED] mov rax, ${Thalium/IceBox}; jmp rax;
  ☆76Updated 6 years ago
• MortenSchenk / tagWnd-Hardening-Bypass
  Bypass for the hardening against usage of tagWnd as a kernel read/write primitive
  ☆32Updated 8 years ago
• marcusbotacin / BranchMonitoringProject
  A branch-monitor-based solution for process monitoring.
  ☆135Updated 5 years ago
• 0vercl0k / symbolizer
  A fast execution trace symbolizer for Windows.
  ☆129Updated last year
• dro / win10-ida-types
  Windows 10 kernel and ntdll internal types, directly compatible with ida.
  ☆53Updated 7 years ago
• JaanusKaapPublic / BlogHyperV
  Tools made for my Hyper-V blog series @ https://foxhex0ne.blogspot.com/
  ☆57Updated 5 years ago
• SinaKarvandi / VMCS-Auditor
  VMCS Auditor provides almost all of Intel's VMCS Layout checklist based on Bochs Emulator.
  ☆31Updated 6 years ago
• yardenshafir / KernelDataStructureFinder
  Driver and WinDBG scripts to dump information about all resources and lookaside lists
  ☆65Updated 5 years ago
• imugee / pegasus
  reverse engineering extension plugin for windbg
  ☆119Updated 6 years ago
• tandasat / findpg
  Windbg extension to find PatchGuard pages
  ☆122Updated 11 years ago
• 0vercl0k / pywinhv
  Python bindings for the Microsoft Hypervisor Platform APIs.
  ☆79Updated 6 years ago
• DProvinciani / pt-detector
  Code-Reuse Exploits detection using Intel Processor Trace
  ☆28Updated 7 years ago
• quarkslab / whvp
  PoC for a snapshot-based coverage-guided fuzzer targeting Windows kernel components
  ☆68Updated 4 years ago
• carter-yagemann / vmi-unpack
  VMI-Unpack - A Virtual Machine Introspection (VMI) based generic unpacker.
  ☆56Updated 5 years ago
• RceNinja / Re-Scripts
  ☆34Updated 4 years ago
• sam-b / HackSysDriverExploits
  ☆50Updated 8 years ago
• usualsuspect / ida_stuff
  ☆27Updated 7 years ago
• siberas / IDA2Sym
  IDAScript to create Symbol file which can be loaded in WinDbg via AddSyntheticSymbol
  ☆41Updated 11 years ago