xdel / bluepillstudyLinks
school project for learning cpu virtualize technology by understanding the blue pill project
☆19Updated 10 years ago
Alternatives and similar repositories for bluepillstudy
Users that are interested in bluepillstudy are comparing it to the libraries listed below
Sorting:
- it can extract functions from .dll, .exe, .sys and it be work! :)☆39Updated 6 years ago
- ☆33Updated 7 years ago
- PoC of BOOST-ed _EPROCESS.VadRoot iterating☆26Updated 11 years ago
- ☆33Updated 4 years ago
- enable libemu run pe file and add some good modify☆14Updated 6 years ago
- Hook IDT vector 0xb2 to detect SCI in 64bit windows.☆34Updated 3 years ago
- just an lite AntiRootkit for interesting☆24Updated 9 years ago
- ☆13Updated 4 years ago
- HAXM hypervisor client☆17Updated 6 years ago
- Detects if a Kernel mode debugger is active by reading the value of KUSER_SHARED_DATA.KdDebuggerEnabled. It is a high level and portable …☆23Updated 8 years ago
- HTTP/HTTPS/DNS inspector (windows driver)☆27Updated 6 years ago
- more at http://www.zer0mem.sk/?p=271☆12Updated 12 years ago
- ☆41Updated 5 years ago
- ☆29Updated 4 years ago
- init☆14Updated 5 years ago
- Kernel-mode file scanner☆18Updated 7 years ago
- Shareds for kernel developement☆28Updated 11 years ago
- A driver that supports communication between a Windows guest and HyperWin☆15Updated 4 years ago
- ☆27Updated 6 years ago
- ☆19Updated 6 years ago
- IDA反-反调试插件 IDAStealth v1.3.3, created 06/28/2011, Jan Newger☆21Updated 7 years ago
- ☆12Updated 7 years ago
- Notes my learning steps about Windows-NT☆23Updated 8 years ago
- ☆14Updated 8 years ago
- Basic Injector running on x64 machines that is able to load into x64 AND x86 processes☆21Updated 6 years ago
- Windows Offline Crash Dump☆17Updated 3 years ago
- Kernel Shellcode to add all privileges in token☆15Updated 8 years ago
- An API Monitor based on Instrumentation☆44Updated 7 years ago
- AllMemPro☆46Updated 7 years ago
- Windbg extension that allows you analyze Control Flow Guard map☆36Updated 3 years ago