An application to view and filter pool allocations from a dmp file on Windows 10 RS5+.
☆156Mar 2, 2023Updated 3 years ago
Alternatives and similar repositories for PoolViewer
Users that are interested in PoolViewer are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Techniques/tools on Windows kernel exploitation☆269Sep 1, 2026Updated last month
- ☆12Aug 31, 2026Updated last month
- CFB is a ProcMon-style tool designed to assist capturing IRPs sent to Windows drivers.☆338Mar 26, 2024Updated 2 years ago
- PoC exploiting Aligned Chunk Confusion on Windows kernel Segment Heap☆213Jul 2, 2020Updated 6 years ago
- ☆165Sep 18, 2021Updated 5 years ago
- Proton VPN Special Offer - Get 70% off • AdSpecial partner offer. Trusted by over 100 million users worldwide. Tested, Approved and Recommended by Experts.
- Useful scripts for WinDbg using the debugger data model☆435Mar 27, 2024Updated 2 years ago
- ☆19Oct 31, 2022Updated 3 years ago
- Driver and WinDBG scripts to dump information about all resources and lookaside lists☆67Apr 4, 2020Updated 6 years ago
- kernel pool windbg extension☆82Jul 23, 2015Updated 11 years ago
- ☆41Jul 9, 2020Updated 6 years ago
- Unofficial Common Log File System (CLFS) Documentation☆193Oct 5, 2021Updated 5 years ago
- HackSysExtremeVulnerableDriver exploits for latest Windows 10 version☆25Jan 13, 2026Updated 9 months ago
- windbg plugin for win32k debugging☆74Oct 14, 2019Updated 7 years ago
- Resolve DOS MZ executable symbols at runtime☆94Nov 12, 2021Updated 4 years ago
- End-to-end encrypted cloud storage - Proton Drive • AdSpecial offer: 40% Off Yearly / 80% Off First Month. Protect your most important files, photos, and documents from prying eyes.
- Examples of leaking Kernel Mode information from User Mode on Windows☆646Jul 7, 2017Updated 9 years ago
- Simple library to spray the Windows Kernel Pool☆111Jan 6, 2020Updated 6 years ago
- A library to develop kernel level Windows payloads for post HVCI era☆539May 18, 2021Updated 5 years ago
- Dump of win32k POCs for bugs I've found☆381Mar 6, 2022Updated 4 years ago
- Internals information about Hyper-V☆753Aug 10, 2026Updated 2 months ago
- This is the P.O.C source for hooking the system calls on Windows 10 (1903) using it's dynamic trace feature weakness☆62Sep 12, 2019Updated 7 years ago
- A Windows kernel dump C++ parser library with Python 3 bindings.☆217Oct 5, 2025Updated last year
- Post exploitation technique to turn arbitrary kernel write / increment into full read/write primitive on Windows 11 22H2☆259Jul 5, 2022Updated 4 years ago
- Command like tool to print mitigation flags for running processes in a memory dump☆48Sep 18, 2020Updated 6 years ago
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- Driver demonstrating how to register a DPC to asynchronously wait on an object☆50Jan 15, 2021Updated 5 years ago
- Toolkit for Hyper-V security research☆154Mar 7, 2022Updated 4 years ago
- File system minifilter driver for Windows to block symbolic link attacks.☆53Dec 16, 2020Updated 5 years ago
- Simple Demo of using Windows Hypervisor Platform☆29Jul 14, 2025Updated last year
- ☆267Jul 10, 2023Updated 3 years ago
- A bunch of JavaScript extensions for WinDbg.☆366Nov 28, 2024Updated last year
- An example of how x64 kernel shellcode can dynamically find and use APIs☆103May 14, 2020Updated 6 years ago
- a demo for x86/x64's paging memory management learning, convert a virtual address from ring3 to physical address in ring0☆18Aug 26, 2017Updated 9 years ago
- Exploiting HEVD's WriteWhatWhereIoctlDispatch for LPE on Windows 10 TH2 through RS3 using GDI objects.☆24Jan 23, 2018Updated 8 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- CallMon is an experimental system call monitoring tool that works on Windows 10 versions 2004+ using PsAltSystemCallHandlers☆146Sep 5, 2020Updated 6 years ago
- Research on Windows Kernel Executive Callback Objects☆316Feb 22, 2020Updated 6 years ago
- Yet another windows internals repo☆220Aug 29, 2021Updated 5 years ago
- A driver that supports communication between a Windows guest and HyperWin☆15Jan 6, 2021Updated 5 years ago
- Advanced driver monitoring utility.☆220Jul 8, 2026Updated 3 months ago
- VMX intrinsics plugin for Hex-Rays decompiler☆75Oct 28, 2019Updated 7 years ago
- Reports and POCs for CVE 2024-43570 and CVE-2024-43535☆31Jun 7, 2025Updated last year