windows-kernel

Windows File System Proxy - FUSE for Windows

Security sensor for realtime threat detection and protection

Intel VT-x based hypervisor aiming to provide a thin VM-exit filtering platform on Windows.

SoftICE-like kernel debugger for Windows 11

Kernel mode WinDbg extension and PoCs for token privilege investigation.

Find zero-days while you sleep. DeepZero is an automated vulnerability research framework that parses, decompiles, and analyzes thousands of Windows kernel drivers for exploitable IOCTLs natively using AI agents.

The first Computer Emergency Response (ARK) Tools for young people ;) 　　　　　　　　　　　　　　　　　　　　　　年轻人的第一款应急响应(ARK)工具 ；）

Hex-Rays microcode plugin for automated simplification of Windows Kernel decompilation.

A minimalistic educational hypervisor for Windows on AMD processors.

SimpleSvmHook is a research purpose hypervisor for Windows on AMD processors.

kHypervisor is a lightweight bluepill-like nested VMM for Windows, it provides and emulating a basic function of Intel VT-x

C++ STL in the Windows Kernel with C++ Exception Support

Windows Storage Proxy Driver - User mode disk storage

Driver Buddy Reloaded is an IDA Pro Python plugin that helps automate some tedious Windows Kernel Drivers reverse engineering tasks

The Universal C++ RunTime library, supporting kernel-mode C++ exception-handler and STL.

Tools and PoCs for Windows syscall investigation.

Windows hypervisor for Intel x64: defensive host hypervisor for Windows designed to mitigate kernel-level attacks including BYOVD, compatible with VMware and Hyper-V.

msFuzz is a coverage-guided fuzzer for Windows kernel drivers that utilizes Intel PT and leverages constraint and dependency analysis to guide fuzzing.

C/C++ Runtime library for system file (Windows Kernel Driver) - Supports Microsoft STL

C# Utilities for Windows Notification Facility