Sample/PoC Windows kernel driver for detect DMA devices by using Vendor ID and Device ID signatures
☆38Sep 22, 2024Updated last year
Alternatives and similar repositories for PCIE-Detector
Users that are interested in PCIE-Detector are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- NASM listing to shellcode converter☆14May 6, 2018Updated 8 years ago
- Shared object ELF Process injection and loading resources.☆12May 9, 2026Updated 4 months ago
- x86-64 Automated test data generator☆29Jul 20, 2026Updated last month
- ☆32Mar 9, 2024Updated 2 years ago
- PEIM (UEFI) bootkit targeting OVMF (EDK2)☆41Nov 28, 2023Updated 2 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- monitors hidden syscalls called from call of duty anticheat☆88Jan 13, 2025Updated last year
- ☆29Aug 3, 2024Updated 2 years ago
- Windows kernel driver that detects hypervisors by probing SIDT/LIDT edge cases, paging/TLB behaviors, privilege transitions, and timing e…☆50Mar 3, 2026Updated 6 months ago
- PDB Rewriting Rust Library☆27Apr 26, 2024Updated 2 years ago
- Exploit POC for CVE-2024-36877☆48Aug 14, 2024Updated 2 years ago
- reverse engineering of the windows nt kernel debugger protocol & reimplementation.☆43Jul 2, 2024Updated 2 years ago
- x86/x64 Ring 0/-2 System Freezer/Debugger☆118May 21, 2025Updated last year
- A DLL with Loader that hooks common windows memory API functions and proxies them to the remote device via DMA☆23Jun 29, 2025Updated last year
- Standard Kernel Library for Windows manipulation in C++☆220Jun 18, 2025Updated last year
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- clearing traces of a loaded driver☆48Jul 2, 2022Updated 4 years ago
- WinDbg-like kernel debugger for Windows, from Linux and macOS☆196Updated this week
- Open Source eBPF Malware Analysis Framework☆55Oct 20, 2024Updated last year
- Kernel-mode Paravirtualization in Ring 2, LLVM based linker, and some other things!☆457Apr 19, 2025Updated last year
- Windows hidden thread suspend POC with code injection☆11May 27, 2017Updated 9 years ago
- ☆17Oct 31, 2022Updated 3 years ago
- ☆39Mar 23, 2023Updated 3 years ago
- POC about how to detect windows kernel debug by pool tag.☆13Nov 29, 2023Updated 2 years ago
- A specialized version of iced-x86 for binary lifting☆24Jun 25, 2026Updated 2 months ago
- Proton VPN Special Offer - Get 70% off • AdSpecial partner offer. Trusted by over 100 million users worldwide. Tested, Approved and Recommended by Experts.
- An analysis and static deobfuscation of codedefender.io protected samples.☆96Apr 18, 2026Updated 5 months ago
- In-memory hiding technique☆66Jan 5, 2025Updated last year
- Simple proof of concept kernel mode driver hooking tpm.sys dispatch to randomize any public key reads☆248Dec 16, 2023Updated 2 years ago
- Efficient general mixed boolean-arithmetic (MBA) simplifier☆136Jul 25, 2026Updated last month
- Activate Windows & Office 🔑☆12Jun 15, 2024Updated 2 years ago
- Walks the CFG bitmap to find previously executable but currently hidden shellcode regions☆140May 17, 2023Updated 3 years ago
- simple zero-dependency timer implementation☆12May 24, 2023Updated 3 years ago
- Windows capability development using GCC and GNU Make☆23Nov 1, 2025Updated 10 months ago
- NailaoLoader: Hiding Execution Flow via Patching☆24Feb 27, 2025Updated last year
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- A fast execution trace symbolizer for Windows that runs on all major platforms and doesn't depend on any Microsoft libraries.☆111Apr 9, 2026Updated 5 months ago
- List UEFI Configuration Tables☆16May 23, 2024Updated 2 years ago
- A basic implementation of Patch Guard that I implemented, that includes integrity checks and other protection mechanisms I added.☆78Mar 29, 2025Updated last year
- PortableMSVC is a command-line tool that automates downloading, caching, extracting, and managing fully portable Microsoft C/C++ toolchai…☆28May 19, 2026Updated 4 months ago
- Achieve arbitrary kernel read/writes/function calling in Hypervisor-Protected Code Integrity (HVCI) protected environments calling withou…☆293Mar 16, 2026Updated 6 months ago
- Hooking Windows' exception dispatcher to protect process's PML4☆271Jan 24, 2025Updated last year
- Generate a PDB file given the old PDB file and an address mapping☆54Aug 3, 2025Updated last year