wizardengineer / krakensvm-mg
A simple x86_64 AMD-v hypervisor type-2 Programmed with C++, with soon to be added syscall hooks. [W.I.P]
☆92Updated last year
Related projects ⓘ
Alternatives and complementary repositories for krakensvm-mg
- A basic 100 loc CPU emulator using the existing code of ntoskrnl.exe☆69Updated last year
- a minimalistic windows hypervisor for amd processors☆98Updated 2 years ago
- Kernel driver for detecting Intel VT-x hypervisors.☆170Updated last year
- Enable SEH support for manual mapped x86-32bit PEs☆65Updated 5 years ago
- A portable header only library extending the C++20 STL.☆69Updated 7 months ago
- VM devirtualization PoC based on AsmJit and llvm☆104Updated 3 years ago
- A small tool for rapid enumeration of CPUID, and MSR fields.☆15Updated 9 months ago
- ☆93Updated 7 years ago
- Windows PDB parser for kernel-mode environment.☆90Updated last year
- Different aproaches to detecting EPT hooks☆84Updated 2 years ago
- Intercepting DeviceControl via WPP☆127Updated 5 years ago
- Binary rewriter for 64-bit PE files.☆43Updated 9 months ago
- Kernel ReClassEx☆63Updated last year
- unorthodox approach to analyze a trace, but this helped me get comfy with x64 instructions overall (excluding sse/avx/etc lol), cleared u…☆52Updated 9 months ago
- A native hypervisor designed for the Windows operating system☆120Updated 3 years ago
- Create stealthy, inline, EPT-like hooks using SMAP and SMEP☆33Updated last month
- Type 2 Hypervisor for security research supported by AMD-V hardware assisted virtualization☆39Updated last year
- An x64 page table iterator written in C++ as a kernel mode windows driver.☆103Updated 3 years ago
- Symbolic Execution based on lifting amd64 to z3☆17Updated 4 months ago
- A devirtualization engine for Themida.☆91Updated 8 months ago
- based on https://github.com/secrary/Hooking-via-InstrumentationCallback☆67Updated 5 years ago
- C++ library for parsing and manipulating PE files statically and dynamically.☆87Updated last year
- intel vt-x type 2 hypervisor☆48Updated 4 months ago
- Ghetto user mode emulation of Windows kernel drivers.☆122Updated last month
- A simple ida python script to find .data ptr☆47Updated last year
- nmi stackwalking + module verification☆91Updated 10 months ago
- A library for intel VT-x hypervisor functionality supporting EPT shadowing.☆48Updated 3 years ago
- 🎨 Seamlessly convert your favorite Visual Studio Code themes to IDA Pro themes.☆86Updated 7 months ago
- Disks for DMA☆98Updated 3 years ago