tandasat Goto Github PK

awesome-virtualization

Collection of resources about Virtualization

blog

bochs

Bochs - Cross Platform x86 Emulator Project

capstone

Capstone disassembly/disassembler framework: Core (Arm, Arm64, M68K, Mips, PPC, Sparc, SystemZ, X86, X86_64, XCore) + bindings (Python, Java, Ocaml)

checksdl

A tool evaluates security configurations of a given PE based on SDL without source code

copyfiles

Copy files onto the IsolatedStorage so that you can download them using IsoStoreSpy.

cs_driver

A sample project for using Capstone from a driver in Visual Studio 2015

cve-2014-0816

CVE-2014-0816

cve-2022-25949

A years-old exploit of a local EoP vulnerability in Kingsoft Antivirus KWatch Driver version 2009.3.17.77.

cve-2023-36427

Report and exploit of CVE-2023-36427

cve-2024-21305

Report and exploit of CVE-2024-21305.

ddimon

Monitoring and controlling kernel API calls with stealth hook using EPT

debuglogger

A software driver that lets you log kernel-mode debug output into a file on Windows.

debugviewpp

DebugView++, collect, view and filter your application logs

deviceopener

A command line tool to check if a specified device is accessible.

docs

This repository contains .NET Documentation.

dotnethooking

Sample use cases of the .NET native code hooking technique

drvloader

A command line tool to load and unload a device driver.

dumpvtable

Generates a Python script to give public interface names in an ActiveX file to an IDB file.

efiseek

Ghidra analyzer for UEFI firmware.

eopmon

Elevation of privilege detector based on HyperPlatform

exploitcapcom

This is a standalone exploit for a vulnerable feature in Capcom.sys

findpg

Windbg extension to find PatchGuard pages

fu_hypervisor

A hypervisor hiding user-mode memory using EPT

gdbinit

Gdbinit for OS X, iOS and others - x86, x86_64 and ARM

guardmon

Hypervisor based tool for monitoring system register accesses.

hello-vt-rp

A simple hypervisor demonstrating the use of the Intel VT-rp (redirect protection) technology.

helloamdhvpkg

HelloAmdHvPkg is a type-1 research hypervisor for AMD processors.

helloiommupkg

The sample DXE runtime driver demonstrating how to program DMA remapping.

hellosmm

This is an instruction to run your own SMM code.