Pinned

1. iris

   WinDbg extension to display Windows process mitigations

   C++ 113 37

2. WinAllocTracer

   Pintool that logs and tracks calls to RtlAllocateHeap, RtlReAllocateHeap, RtlFreeHeap, VirtualAllocEx, and VirtualFreeEx.

   C++ 34 13

3. hunter

   (l)user hunter using WinAPI calls only

   C++ 338 109

4. kcshell

   Simple Python3 based interactive assembly/disassembly shell for various architectures powered by Keystone/Capstone.

   Python 104 20

5. CVE-2018-19320

   Exploiting ring0 memcpy-like functionality to disable Driver Signing Enforcement (DSE)

   C++ 18 6

6. windows-ps-callbacks-experiments

   Files for http://deniable.org/windows/windows-callbacks

   C++ 4 1