Tools
Windows-Kernel-Explorer
AxtMueller/Windows-Kernel-Explorer
A Windows kernel research tool offering process, file, registry, driver and hook inspection plus low-level system management from Windows XP to 11.
Topics
Related projects
EfiGuard2.6kEfiGuard is a portable UEFI bootkit for x64 Windows that disables PatchGuard and Driver Signature Enforcement at boot. It is a low-level security research tool for kernel debugging and driver testing.
Chaos-Rootkit1.1kA Windows Ring 0 rootkit research project with a GUI, demonstrating kernel techniques such as process hiding, privilege elevation, driver swapping and file protection for security study.
winfsp9kA Windows file-system development framework that provides a kernel driver and user-mode APIs, enabling developers to build custom file systems similar to FUSE.
x64dbg50.3kAn open-source user-mode debugger for Windows built for reverse engineering and malware analysis, offering disassembly, memory inspection, scripting and a rich plugin system for hands-on binary debugging.
reactos18.5kA free open-source operating system compatible with Windows apps and drivers.
TitanHide3kA Windows kernel driver that hooks Nt* routines to hide debuggers from selected processes, built for reverse engineering and security research inside virtual machines.