0xhellord Goto Github PK

newhidedriverex

Hide Driver By MiProcessLoaderEntry

nimgetsyscallstub

Get fresh Syscalls from a fresh ntdll.dll copy

noscreen

Hiding the window from screenshots using the function win32kfull::ChangeWindowTreeProtection

novmp

Static devirtualizer for VMProtect x64 3.x. powered by VTIL.

nt_os

ntcall64

Windows NT x64 syscall fuzzer

ntcore

Simple standalone bundle of NT core APIs

ntdiff

ntfsx

Mac NTFS 支持工具，使用electron-vue，muse-ui实现 ，界面漂亮，开源免费

ntldr

ntloader

ntrays

Hex-Rays microcode plugin for automated simplification of Windows Kernel decompilation.

openav

Open source anti virus

opendiskless

Open Source Diskless Solution

openedr

Open EDR public repository

openhips

Open source HIPS

openpvp.net

Open source implementation of the PvP.net platform

os

Minoca operating system

os-tutorial

How to create an OS from scratch

ozone

A platform for building low level programs for multiple platforms using XML documents

pabbs

无聊写的玩

page-table-exploitation

A demonstration of how page tables can be used to run arbitrary code in ring-0 and lead to a privesc. Uses CVE-2016-7255 as an example.

patterngen

pdbex

(This is a fork used primarily to submit patches into upstream repository) pdbex is a utility for reconstructing structures and unions from the PDB into compilable C headers

pe

Cross-platform C++ library for PE file format manipulation

pe-loader

library, which help to describe or load and execute PE files.

perfview

PerfView is a CPU and memory performance-analysis tool

pg1903

phys_virt

Physical Memory discovery. This is a Winblows kernel driver that helps translate physical memory addresses into their respective virtual memory addresses (i.e. map physical page(s) into user mode process virtual address space)

post-tweaks

A post-installation batch script for Windows