37 Open source projects that are alternatives of or similar to PrivFu

A command tree based on commands and extensions for Windows Kernel Debugging.

Debugger extension for the Debugging Tools for Windows (WinDbg, KD, CDB, NTSD).

Extensions for the new WinDbg

Windbg extension that allows you analyze Control Flow Guard map

WinDbg Extensions for Python

Toy scripts for playing with WinDbg JS API

Just another tool to download specify Symbol (.pdb) files

Hex-Rays microcode plugin for automated simplification of Windows Kernel decompilation.

C-shellcode to hex converter, handy tool for paste & execute shellcodes in IDA PRO, gdb, windbg, radare2, ollydbg, x64dbg, immunity debugger & 010 editor

CSharp Writeups for HackSys Extreme Vulnerable Driver

Record & prevent process creation in kernel mode

Scripts to prepare Windows system for debugging.

Utility to resolve SQL Server callstacks to their correct symbolic form using just PDBs and without a dump file

No description or website provided.

Driver Buddy Reloaded is an IDA Pro Python plugin that helps automate some tedious Windows Kernel Drivers reverse engineering tasks

Windows File System Proxy - FUSE for Windows

C++ STL in the Windows Kernel with C++ Exception Support

Reverse Engineering Resources About All Platforms(Windows/Linux/macOS/Android/iOS/IoT) And Every Aspect! (More than 3500 open source tools and 2300 posts&videos)

My notes collected while debugging various .NET and Windows problems.

Host of debugging-related extensions such as post-mortem tools or WinDBG extensions

PEDA-like debugger UI for WinDbg

A bunch of JavaScript extensions for WinDbg.

Useful Scripts for helping in reverse engeenering

WinDbg extension to display Windows process mitigations

Windows kernel dump C++ parser with Python 3 bindings.

A repository maintains the book of ".NET Core application debugging" sample code.

A practical guide to analyze memory dumps of .Net applications by using Windbg

Windows Object Explorer 64-bit

A hacky debugger UI for hackers

Dump and analyze .Net applications memory ( a gui for WinDbg and ClrMd )

A PowerShell front-end for the Windows debugger engine.

WinDBG Anti-RootKit Extension

A service for automated crash-dump analysis

kernel-mode Anti-Anti-Debug plugin. based on intel vt-x && ept technology

kHypervisor is a lightweight bluepill-like nested VMM for Windows, it provides and emulating a basic function of Intel VT-x

Useful scripts for WinDbg using the debugger data model

WinDbg extension for data mining managed heap. It also includes commands to list http request, wcf services, WIF tokens among others