windows-kernel

Windows File System Proxy - FUSE for Windows

State-of-the-art native debugging tools

Adversary tradecraft detection, protection, and hunting

Intel VT-x based hypervisor aiming to provide a thin VM-exit filtering platform on Windows.

SoftICE-like kernel debugger for Windows 11

Kernel mode WinDbg extension and PoCs for token privilege investigation.

Hex-Rays microcode plugin for automated simplification of Windows Kernel decompilation.

Windows Storage Proxy Driver - User mode disk storage

kHypervisor is a lightweight bluepill-like nested VMM for Windows, it provides and emulating a basic function of Intel VT-x

C++ STL in the Windows Kernel with C++ Exception Support

The Universal C++ RunTime library, supporting kernel-mode C++ exception-handler and STL.

A minimalistic educational hypervisor for Windows on AMD processors.

SimpleSvmHook is a research purpose hypervisor for Windows on AMD processors.

Tools and PoCs for Windows syscall investigation.

Driver Buddy Reloaded is an IDA Pro Python plugin that helps automate some tedious Windows Kernel Drivers reverse engineering tasks

C/C++ Runtime library for system file (Windows Kernel Driver) - Supports Microsoft STL

msFuzz is a coverage-guided fuzzer for Windows kernel drivers that utilizes Intel PT and leverages constraint and dependency analysis to guide fuzzing.

C# Utilities for Windows Notification Facility

A native hypervisor designed for the Windows operating system

masm32 kernel programming, drivers, tutorials, examples, and tools (credits Four-F)