niyumingri Goto Github PK

awesome-windows-kernel-security-development

windows kernel security development

dokany

User mode file system library for windows with FUSE Wrapper

eacreversing

Reversing EasyAntiCheat.

easy-hwid-spoofer

基于内核模式的硬件信息欺骗工具

hidedriver

之前那份是7600的，每次编译搞得好麻烦。更新一个VS2017可以直接编译的。

hivex

windows registry hive extraction library. PLEASE DO NOT USE GITHUB FOR ISSUES OR PULL REQUESTS. See the website for how to file a bug or contact us. http://libguestfs.org

hook-kdtrap

hwid

HWID spoofer

hyperdbg

State-of-the-art native debugging tool

kace

Emulate Drivers in RING3 with self context mapping or unicorn

ke64

Anti-Rootkit（对抗恶意程序），Ark工具

kpdb

Portable Windows kernel-mode PDB parser

luci-app-jd-dailybonus

Luci for JD dailybonus Script

memscanner

Analyze Windows x64 Kernel Memory Layout

nidhogg

Nidhogg is an all-in-one simple to use rootkit for red teams.

openedr

Open EDR public repository

physmem_drivers

A collection of various vulnerable (mostly physical memory exposing) drivers.

query-pdb

query-pdb is a server-side software for parsing PDB files. The software provides PDB online parsing service.

speakeasy

Windows kernel and user mode emulation.

stresser

Anti-Malware security solution for Windows environment.

symlinkprotect

File system minifilter driver for Windows to block symbolic link attacks.

unicorn_pe

Unicorn PE is an unicorn based instrumentation project designed to emulate code execution for windows PE files.

vm-3.5.1

vmwarehardenedloader

Vmware Hardened VM detection mitigation loader (anti anti-vm)

vmwarethrough

win32json

A JSON representation of win32metadata. These files are generated by https://github.com/marlersoft/win32jsongen