Message-passing kernel + userspace

A lightweight script-based dynamic tracing tool for Linux

Windows NT x64 syscall fuzzer

Information released publicly by NCC Group's Full Spectrum Attack Simulation (FSAS) team.

First open source and publicly available System Management Mode backdoor for UEFI based platforms. Good as general purpose playground for various SMM experiments.

kernel module for taking block-level snapshots and incremental backups of Linux block devices

EFI FileSystem drivers

PIC lsass dumper using cloned handles

Xvisor: eXtensible Versatile hypervISOR

A cross platform C++ HTTP library that interfaces natively to other platforms.

The Grimoire Hypervisor solution for x86 Processors with experimental nested virtualization support. Remastering with Rust in progress.

A project for allowing EDK-II Development with Visual Studio

Lunatik is a framework for scripting the Linux kernel with Lua.

DARPA Challenges Sets for Linux, Windows, and macOS

Functional Network Framework for Multi-Core Architectures

Open source library that implements translator and tools for REIL (Reverse Engineering Intermediate Language)

WinSpy++

The TPM Software Stack from Microsoft Research

MCP Monitoring with eBPF

C++ implementation for 💫StarCoder

Cross Platform Kernel Fuzzer Framework

A Linux Host-based Intrusion Detection System based on eBPF.

Tool for launching a Linux process from a snapshot

hvdos, a simple DOS emulator based on the OS X Hypervisor.framework

Windows Storage Proxy Driver - User mode disk storage

KernelMemorySanitizer, a detector of uses of uninitialized memory in the Linux kernel

Script to execute in memory a sequence of opcodes

A modular Windows.h Header. Licensed under Public Domain & MIT.

The Windows Library for Intel Process Trace (WinIPT) is a project that leverages the new Intel Processor Trace functionality exposed by Windows 10 Redstone 5 (1809), through a set of libraries and …