Top 13 windows-kernel Open-Source Projects

• winfsp

  31 6,634 5.7 C

  Windows File System Proxy - FUSE for Windows

  

Project mention: WinFsp · Windows File System Proxy | /r/patient_hackernews | 2023-06-16

• HyperDbg

  6 2,612 9.5 C

  State-of-the-art native debugging tool

  

Project mention: Reverse Engineering DOS Software as If It Were 1990 | news.ycombinator.com | 2024-02-02

https://hyperdbg.org and m1n1 (Apple Silicon) spring to mind as modern supervisor/hypervisor debuggers.

There's nothing modern I'm aware of that lets you press a key combination to get into a hypervisor debug UI like softICE was known for, though. It's all shifted to host-and-target debugging. You'd use a "normal" debugger on one machine (lldb/gdb, WinDbg, IDA, etc.) and either supervised host-to-target connection (network-to-kernel/hypervisor on x86, OCD like JTAG/SWD/CoreSight on embedded) or emulation (for pretty much everything but device driver development).

• InfluxDB

  www.influxdata.com featured

  Power Real-Time Data Analytics at Scale. Get real-time insights from all types of time series data with InfluxDB. Ingest, query, and analyze billions of data points in real-time with unbounded cardinality.

  

• fibratus

  46 2,087 8.9 Go

  A modern tool for Windows kernel exploration and tracing with a focus on security

Project mention: Announcing Fibratus 2.0.0 | /r/Malware | 2023-09-05

• HyperPlatform

  1 1,458 4.1 C++

  Intel VT-x based hypervisor aiming to provide a thin VM-exit filtering platform on Windows.

• BugChecker

  17 894 1.9 C

  SoftICE-like kernel debugger for Windows 11

Project mention: BugChecker: SoftICE-like kernel debugger for Windows 11 | /r/blueteamsec | 2023-07-08

• PrivFu

  4 675 9.1 C#

  Kernel mode WinDbg extension and PoCs for token privilege investigation.

Project mention: PoCs to help learning how to get SYSTEM privilege on Windows | /r/blueteamsec | 2023-06-18

• NtRays

  1 477 2.9 C++

  Hex-Rays microcode plugin for automated simplification of Windows Kernel decompilation.

• SaaSHub

  www.saashub.com featured

  SaaSHub - Software Alternatives and Reviews. SaaSHub helps you find the best software and product alternatives

  

• stlkrn

  2 376 3.4 C++

  C++ STL in the Windows Kernel with C++ Exception Support

• AtomicSyscall

  1 345 6.1 C#

  Tools and PoCs for Windows syscall investigation.

• crtsys

  1 170 0.0 C++

  C/C++ Runtime library for system file (Windows Kernel Driver) - Supports Microsoft STL

• fsfilter-rs

  2 33 3.0 C++

  Experimental: A rust library to monitor filesystem 🪛 and more in windows

  

• cagrackme

  1 23 4.5 Batchfile

  short crackme for Windows XP SP3 (32 bit version). ring0 stuff. IMO very fun x-)

• platforminfo

  2 3 9.0 Python

  System info made easy - Python library to find system info on your computer. Requires python ≥ 3.7

  

Project mention: I want some feedback on my new Python library | news.ycombinator.com | 2023-09-08

windows-kernel related posts

• Reverse Engineering DOS Software as If It Were 1990

  1 project | news.ycombinator.com | 2 Feb 2024

• HyperDbg Debugger – A debugger designed for analyzing, fuzzing and reversing

  1 project | news.ycombinator.com | 28 Jan 2024

• Announcing Fibratus 2.0.0

  1 project | /r/Malware | 5 Sep 2023

• PoCs to help learning how to get SYSTEM privilege on Windows

  1 project | /r/blueteamsec | 18 Jun 2023

• WinFsp · Windows File System Proxy

  1 project | /r/patient_hackernews | 16 Jun 2023

• WinFsp · Windows File System Proxy

  1 project | /r/hackernews | 16 Jun 2023

• Arts Of Get Systems - PoCs to help learning how to get SYSTEM privilege.

  1 project | /r/blueteamsec | 7 Jun 2023
• A note from our sponsor - InfluxDB
  www.influxdata.com | 16 May 2024

  Get real-time insights from all types of time series data with InfluxDB. Ingest, query, and analyze billions of data points in real-time with unbounded cardinality. Learn more →

Index

Sponsored

SaaSHub - Software Alternatives and Reviews

SaaSHub helps you find the best software and product alternatives

www.saashub.com