Discover tandasat/kraft_dinner Open Source project

Stars
90
Rank 369,088 (Top 8 %)
Language
C
License
MIT License
Created almost 4 years ago
Updated almost 4 years ago

tandasat

There are no reviews yet. Be the first to send feedback to the community and the maintainers!

Tool to dump UEFI runtime drivers implementing runtime services for Windows

HyperPlatform

Intel VT-x based hypervisor aiming to provide a thin VM-exit filtering platform on Windows.

C++

1,519

DdiMon

Monitoring and controlling kernel API calls with stealth hook using EPT

C++

1,146

Hypervisor-101-in-Rust

The materials of "Hypervisor 101 in Rust", a one-day long course, to quickly learn hardware-assisted virtualization technology and its application for high-performance fuzzing on Intel/AMD processors.

Rust

981

MiniVisorPkg

The research UEFI hypervisor that supports booting an operating system.

546

SimpleSvmHook

SimpleSvmHook is a research purpose hypervisor for Windows on AMD processors.

C++

351

SimpleSvm

A minimalistic educational hypervisor for Windows on AMD processors.

PgResarch

ExploitCapcom

This is a standalone exploit for a vulnerable feature in Capcom.sys

C++

280

MemoryMon

Detecting execution of kernel memory where is not backed by any image file

C++

252

DotNetHooking

Sample use cases of the .NET native code hooking technique

201

barevisor

A bare minimum hypervisor on AMD and Intel processors for learners.

Rust

189

scripts_for_RE

Python scripts for reverse engineering.

Python

178

GuardMon

Hypervisor based tool for monitoring system register accesses.

C++

140

UefiVarMonitor

The runtime DXE driver monitoring access to the UEFI variables by hooking the runtime service table.

136

SmmExploit

The report and the exploit of CVE-2021-26943, the kernel-to-SMM local privilege escalation vulnerability in ASUS UX360CA BIOS version 303.

133

hvext

The Windbg extension that implements commands helpful to study Hyper-V on Intel processors.

JavaScript

126

EopMon

Elevation of privilege detector based on HyperPlatform

C++

117

Sushi

a Japanese food keeps you sane

C++

117

findpg

Windbg extension to find PatchGuard pages

C++

116

UEFI-BIOS-Security

Security Camp 2021 & GCC 2022

111

WinIoCtlDecoder

IDA Plugin which decodes Windows Device I/O control code into DeviceType, FunctionCode, AccessType and MethodType.

Python

106

FU_Hypervisor

A hypervisor hiding user-mode memory using EPT

104

WPBT-Builder

The simple UEFI application to create a Windows Platform Binary Table (WPBT) from the UEFI shell.

100

HelloSmm

This is an instruction to run your own SMM code.

100

DebugLogger

A software driver that lets you log kernel-mode debug output into a file on Windows.

C++

Hello-VT-rp

A simple hypervisor demonstrating the use of the Intel VT-rp (redirect protection) technology.

Rust

HelloAmdHvPkg

HelloAmdHvPkg is a type-1 research hypervisor for AMD processors.

CVE-2023-36427

Report and exploit of CVE-2023-36427

C++

Scavenger

A minifilter driver preserves all modified and deleted files.

RemoteWriteMonitor

A tool to help malware analysts tell that the sample is injecting code into other process.

C++

meow

nyā

C++

HelloIommuPkg

The sample DXE runtime driver demonstrating how to program DMA remapping.

DumpVTable

Generates a Python script to give public interface names in an ActiveX file to an IDB file.

C++

DrvLoader

A command line tool to load and unload a device driver.

C++

CVE-2022-25949

A years-old exploit of a local EoP vulnerability in Kingsoft Antivirus KWatch Driver version 2009.3.17.77.

C++

cs_driver

A sample project for using Capstone from a driver in Visual Studio 2015

CVE-2024-21305

Report and exploit of CVE-2024-21305.

C++

CVE-2014-0816

C++

tandasat.github.io

HTML

hyperplatform_log_parser

User-mode program parsing logs created by HyperPlatform

C++

ProjectLoadTimeMonitor

The Visual Studio extension that measures load time of each project when a solution file is opened.

recon2024_demo

Provides commands to read from and write to arbitrary kernel-mode memory for users with the Administrator privilege. HVCI compatible. No test signing mode is required.

C++

CheckSDL

A tool evaluates security configurations of a given PE based on SDL without source code

C++

ListWorkItems

Lists work items being queued currently.

C++

DeviceOpener

A command line tool to check if a specified device is accessible.

C++

List-UEFI-Configuration-Tables

List UEFI Configuration Tables

Rust

windbg_init

Windbg Init Script

ScopedResource

Scoped Resource - Generic RAII Wrapper for the Standard Library by Peter Sommerlad and Andrew L. Sandoval

C++

win32_debugout

Shows debug strings on DebubView from an attached process by win32_remote.exe.

C++

ping_vmm

A user-mode program knocking at HyperPlatform's "backdoor"

C++

SecRuntimeSample

A sample usege of SecRuntime.dll on Windows Phone

C++

blog

Ruby

CopyFiles

Copy files onto the IsolatedStorage so that you can download them using IsoStoreSpy.

mylight

Using LED of Samsung Galaxy Ace S5830

Java

tandasat

shared

Manages files that are shared with multiple boxes.

Vim Script

tandasat/kraft_dinner

tandasat

Reviews

Repository Details

More Repositories