A tool that is used to hunt vulnerabilities in x64 WDM drivers
☆479Jun 18, 2026Updated 4 months ago
Alternatives and similar repositories for ioctlance
Users that are interested in ioctlance are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- ☆95Aug 16, 2025Updated last year
- msFuzz is a coverage-guided fuzzer for Windows kernel drivers that utilizes Intel PT and leverages constraint and dependency analysis to …☆233Dec 24, 2025Updated 10 months ago
- Anti-Rootkit/Anti-Cheat Driver to uncover unbacked or hidden kernel code.☆364Mar 12, 2026Updated 7 months ago
- Admin to Kernel code execution using the KSecDD driver☆279Apr 19, 2024Updated 2 years ago
- Windows Kernel Drivers fuzzer☆384Mar 15, 2017Updated 9 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- A set of programs for analyzing common vulnerabilities in COM☆266Sep 8, 2024Updated 2 years ago
- LLVM plugin to transparently apply stack spoofing and indirect syscalls to Windows x64 native calls at compile time.☆329Jan 17, 2024Updated 2 years ago
- Vulnerable driver research tool, result and exploit PoCs☆242Nov 1, 2023Updated 3 years ago
- Harness to issue Virtual Secure Mode (VSM) "secure calls" from VTL 0 to VTL 1☆89Sep 8, 2025Updated last year
- Experimental Windows x64 Kernel Rootkit with anti-rootkit evasion features.☆615Aug 2, 2025Updated last year
- A C++ proof of concept demonstrating the exploitation of Windows Protected Process Light (PPL) by leveraging COM-to-.NET redirection and …☆337Mar 6, 2025Updated last year
- Static analysis & exploitation-triage toolkit for Windows kernel drivers. Discover IOCTLs, Symbolic Links, and check cert , and Downlaods…☆211Apr 27, 2026Updated 6 months ago
- Windows KASLR bypass using prefetch side-channel☆218Apr 26, 2024Updated 2 years ago
- A library to develop kernel level Windows payloads for post HVCI era☆544May 18, 2021Updated 5 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Finding Truth in the Shadows☆127Jan 26, 2023Updated 3 years ago
- PoCs for Kernelmode rootkit techniques research.☆445Mar 25, 2026Updated 7 months ago
- Post exploitation technique to turn arbitrary kernel write / increment into full read/write primitive on Windows 11 22H2☆260Jul 5, 2022Updated 4 years ago
- Virtual Trust Level (VTL 1) secure call tracing☆108Jul 19, 2026Updated 3 months ago
- Interceptor is a kernel driver focused on tampering with EDR/AV solutions in kernel space☆135Jan 2, 2023Updated 3 years ago
- Driver Buddy Reloaded is an IDA Pro Python plugin that helps automate some tedious Windows Kernel Drivers reverse engineering tasks☆473Oct 19, 2026Updated 2 weeks ago
- Dont Call Me Back - Dynamic kernel callback resolver. Scan kernel callbacks in your system in a matter of seconds!☆261Jul 9, 2024Updated 2 years ago
- Rusty Hypervisor - Windows UEFI Blue Pill Type-1 Hypervisor in Rust (Codename: Illusion)☆415May 14, 2026Updated 5 months ago
- ☆150Jan 25, 2024Updated 2 years ago
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- Exploitation of process killer drivers☆206Oct 17, 2023Updated 3 years ago
- Load a dynamic library from memory by modifying the native Windows loader☆311May 5, 2026Updated 6 months ago
- Hijacking valid driver services to load arbitrary (signed) drivers abusing native symbolic links and NT paths☆366Aug 11, 2024Updated 2 years ago
- BOF with Synthetic Stackframe☆276Oct 30, 2025Updated last year
- Two new offensive techniques using Windows Fibers: PoisonFiber (The first remote enumeration & Fiber injection capability POC tool) Phan…☆316Sep 18, 2024Updated 2 years ago
- ☆203Jul 29, 2024Updated 2 years ago
- Gain insights into MS-RPC implementations that may be vulnerable using an automated approach and make it easy to visualize the data. By f…☆351May 4, 2026Updated 6 months ago
- Evasion by machine code de-optimization.☆431Jul 22, 2024Updated 2 years ago
- Leaking kernel addresses from ETW consumers. Requires Administrator privileges.☆95Nov 6, 2025Updated last year
- Serverless GPU API endpoints on Runpod - Get Bonus Credits • AdSkip the infrastructure headaches. Auto-scaling, pay-as-you-go, no-ops approach lets you focus on innovating your application.
- Proof-of-concept kernel driver that hijacks the Windows kernel extension table mechanism to preserve process notify callbacks even when a…☆100Jul 7, 2025Updated last year
- Gain insights into COM/DCOM implementations that may be vulnerable using an automated approach and make it easy to visualize the data. By…☆167Nov 23, 2025Updated 11 months ago
- Shellcode Loader Utilizing ETW Events☆66Feb 26, 2025Updated last year
- a tool used to analyze and monitor in named pipes☆201Oct 27, 2024Updated 2 years ago
- Windows rootkit designed to work with BYOVD exploits☆227Jan 18, 2025Updated last year
- PoC Implementation of a fully dynamic call stack spoofer☆1,015Jul 20, 2024Updated 2 years ago
- Implementing an early exception handler for hooking and threadless process injection without relying on VEH or SEH☆142Aug 31, 2025Updated last year