tandasat

Satoshi Tanda's repositories

HyperPlatform

Intel VT-x based hypervisor aiming to provide a thin VM-exit filtering platform on Windows.

Language:C++MIT1690 104 88

DdiMon

Monitoring and controlling kernel API calls with stealth hook using EPT

Language:C++MIT1315 65 48

The materials of "Hypervisor 101 in Rust", a one-day long course, to quickly learn hardware-assisted virtualization technology and its application for high-performance fuzzing on Intel/AMD processors.

Language:RustMIT1141 13 10

MiniVisorPkg

The research UEFI hypervisor that supports booting an operating system.

Language:CMIT682 20 19

SimpleSvm

A minimalistic educational hypervisor for Windows on AMD processors.

Language:C++MIT470 19 2

barevisor

A bare minimum hypervisor on AMD and Intel processors for learners.

Language:RustMIT317 6 6

ExploitCapcom

This is a standalone exploit for a vulnerable feature in Capcom.sys

Language:C++MIT316 10 3

scripts_for_RE

Python scripts for reverse engineering.

Language:Python184 180

hvext

The Windbg extensions to study Hyper-V on Intel and AMD processors.

Language:JavaScriptMIT167 12 1

WinIoCtlDecoder

IDA Plugin which decodes Windows Device I/O control code into DeviceType, FunctionCode, AccessType and MethodType.

Language:PythonMIT118 8 1

WPBT-Builder

The simple UEFI application to create a Windows Platform Binary Table (WPBT) from the UEFI shell.

Language:CMIT118 6 3

UEFI-BIOS-Security

Security Camp 2021 & GCC 2022

114 10

Hello-VT-rp

A simple hypervisor demonstrating the use of the Intel VT-rp (redirect protection) technology.

Language:RustMIT109 1 1

CVE-2023-36427

Report and exploit of CVE-2023-36427

Language:C++MIT89 20

HelloIommuPkg

The sample DXE runtime driver demonstrating how to program DMA remapping.

Language:CMIT66 100

DumpVTable

Generates a Python script to give public interface names in an ActiveX file to an IDB file.

Language:C++MIT50 5 2

CVE-2022-25949

A years-old exploit of a local EoP vulnerability in Kingsoft Antivirus KWatch Driver version 2009.3.17.77.

Language:C++MIT38 4 1

CVE-2024-21305

Report and exploit of CVE-2024-21305.

Language:C++MIT38 20

recon2024_demo

Provides commands to read from and write to arbitrary kernel-mode memory for users with the Administrator privilege. HVCI compatible. No test signing mode is required.

Language:C++MIT22 2 1