windows-kernel
There are 25 repositories under windows-kernel topic.
- winfspLanguage:C 6671
- HyperDbgLanguage:C 2631
rabbitstack / fibratus
A modern tool for Windows kernel exploration and tracing with a focus on security
Language:Go 2093tandasat / HyperPlatform
Intel VT-x based hypervisor aiming to provide a thin VM-exit filtering platform on Windows.
Language:C++ 1465- Language:C 896
daem0nc0re / PrivFu
Kernel mode WinDbg extension and PoCs for token privilege investigation.
Language:C# 682can1357 / NtRays
Hex-Rays microcode plugin for automated simplification of Windows Kernel decompilation.
Language:C++ 481- Language:C 410
MiroKaku / ucxxrt
The Universal C++ RunTime library, supporting kernel-mode C++ exception-handler and STL.
Language:C++ 384- Language:C++ 378
KelvinMsft / kHypervisor
kHypervisor is a lightweight bluepill-like nested VMM for Windows, it provides and emulating a basic function of Intel VT-x
Language:C++ 374Tools and PoCs for Windows syscall investigation.
Language:C# 346SimpleSvmHook is a research purpose hypervisor for Windows on AMD processors.
Language:C++ 322VoidSec / DriverBuddyReloaded
Driver Buddy Reloaded is an IDA Pro Python plugin that helps automate some tedious Windows Kernel Drivers reverse engineering tasks
Language:Python 300- Language:C++ 280
ntoskrnl7 / crtsys
C/C++ Runtime library for system file (Windows Kernel Driver) - Supports Microsoft STL
Language:C++ 174- Language:C# 124
amiryeshurun / HyperWin
A native hypervisor designed for the Windows operating system
Language:C 118- sicLanguage:C 112
therealdreg / masm32-kernel-programming
masm32 kernel programming, drivers, tutorials, examples, and tools (credits Four-F)
Language:Assembly 1110dayResearchLab / msFuzz
Targeting Windows Kernel Driver Fuzzer
Language:Makefile 109SoftSec-KAIST / NTFuzz
NTFUZZ: Enabling Type-Aware Kernel Fuzzing on Windows with Static Binary Analysis (IEEE S&P '21)
Language:F# 88Deputation / kernel_payload_comms
A proof of concept demonstrating communication via mapped shared memory structures between a user-mode process and a kernel-mode payload on Windows 10 20H2.
Language:C++ 65KiFilterFiberContext / windows-software-policy
Research on obfuscated licensing APIs / CLIP service in the Windows kernel
Language:C 63- android-memorytool
Anonym0usWork1221 / android-memorytool
Android Memory Tools written in python for RAM data reading and writing process of android, linux and windows os's.
Language:Python 50 loneicewolf / smbdoor
improving zerosums smbdoor - a silent remote backdoor which abuses undoc. APIs in srvnet.sys
Language:C 50danielkrupinski / KernelProcessList
Example Windows Kernel-mode Driver which enumerates running processes.
Language:C 49- Language:C++ 48
CSharp Writeups for HackSys Extreme Vulnerable Driver
Language:C# 46IDouble / Kernel-Memory-Reading-Writing
🔍 Code to read / write the Process Memory from the Kernel 🔧
Language:C 44SilverTuxedo / keval
Call arbitrary Windows kernel-mode functions from Python on another machine
Language:Python 43yardenshafir / DpcWait
Driver demonstrating how to register a DPC to asynchronously wait on an object
Language:C++ 43SubconsciousCompute / fsfilter-rs
Experimental: A rust library to monitor filesystem 🪛 and more in windows
Language:C++ 33call gates as stable comunication channel for NT x86 and Linux x86_64
Language:C++ 27short crackme for Windows XP SP3 (32 bit version). ring0 stuff. IMO very fun x-)
Language:Batchfile 23- Language:C 22
