utshina / WHP-simpleLinks
A simple example of using Windows Hypervisor Platform (WHP)
☆12Updated 4 years ago
Alternatives and similar repositories for WHP-simple
Users that are interested in WHP-simple are comparing it to the libraries listed below
Sorting:
- AMD SVM hypervisor rootkit proof of concept☆47Updated 2 years ago
- Reverse engineered API for Microsoft's Time Travel Debugger☆35Updated last year
- Windows Minidump loader for Ghidra☆29Updated 3 years ago
- Simple Intel VT-x type-2 hypervisor for 64-bit Linux.☆20Updated 5 years ago
- Windows kernel driver template for cmkr and llvm-msvc.☆34Updated last year
- A code parser for C-Style header files that lets you to parse function's prototypes and data types used in their parameters.☆94Updated 3 years ago
- Runtime smm module loader☆34Updated 2 years ago
- Unicorn Engine port for UEFI firmware☆48Updated 7 months ago
- This master thesis project continuously collects and analyses Microsoft Windows kernel drivers using static and dynamic methods to help s…☆21Updated last year
- Support Windows OS Reversing by searching easily for references to functions across many DLLs☆32Updated 3 years ago
- LLVM based devirtualization PoC’s.☆21Updated 3 years ago
- IFL - Interactive Functions List (plugin for Binary Ninja)☆24Updated last year
- This is a ring -1 header framework in order to simplify the creation of hypervisors on SVM☆26Updated 2 years ago
- Sample/PoC Windows kernel driver for detect DMA devices by using Vendor ID and Device ID signatures☆35Updated last year
- Hyper-V related resources☆31Updated last year
- Helper script for Windows kernel debugging with IDA Pro on native Bochs debugger (including PDB symbols)☆61Updated 2 years ago
- ☆25Updated 5 months ago
- Plugin for x64dbg to disable parallel loading of dependencies☆19Updated 3 years ago
- Different tools for Microsoft Hyper-V researching☆62Updated 4 months ago
- Binary Ninja plugin that can be used to apply Triton's dead store eliminitation pass on basic blocks or functions.☆64Updated last year
- A driver to implement IOCTL hooking☆25Updated 3 years ago
- Using Zydis and LLVM to lift unsupported instructions to LLVM-IR☆30Updated 4 years ago
- FastSymApi - A Fast API PDB Symbol Cache Server that efficiently caches and compresses PDBs on disk for quick and repeated retrieval.☆18Updated 4 months ago
- A thin introspection hypervisor framework that allows for low level resource manipulation.☆13Updated last year
- A collection of tools, source code, and papers researching Windows' implementation of CET.☆86Updated 5 years ago
- Set of plugins and library for dynamic pdb generation and synchronisation☆37Updated last year
- This plugin serves as a bridge between Binary Ninja and Ghidra's disassembler.☆36Updated 3 years ago
- x86 and x64 assembly "read-eval-print loop" for Windows☆33Updated 8 years ago
- LLVM Without The ROP Gadgets!☆26Updated last year
- Binary Ninja plugin for automating VMProtect analysis☆63Updated 2 years ago