2 مستودعات
Tools for analyzing the execution flow and behavior of kernel-level processes.
Distinct from Kernel Task Inspection: Distinct from Kernel Task Inspection: focuses on the execution flow and vulnerability identification rather than just static state extraction.
Explore 2 awesome GitHub repositories matching operating systems & systems programming · Kernel Execution Analysis. Refine with filters or upvote what's useful.
pwndbg is a GDB plugin and binary analysis framework designed for reverse engineering, exploit development, and low-level program analysis. It extends the core functionality of the debugger to provide advanced memory inspection and automation tools. The project distinguishes itself with specialized capabilities for heap analysis across glibc, jemalloc, and musl, as well as a comprehensive kernel debugging toolkit for inspecting Linux kernel tasks and slab allocators. It includes an integrated ROP gadget searcher for constructing exploit chains and an LLM-powered debugging assistant that provi
Enables inspection of kernel-level execution via system emulation to identify security vulnerabilities.
HyperDbg is a hardware-assisted kernel-mode debugging platform that leverages virtualization to monitor and control system execution. By utilizing hypervisor-level primitives, it enables deep system analysis and instrumentation without relying on standard operating system debugging interfaces. The framework provides a comprehensive environment for inspecting both kernel and user-mode processes, allowing for granular control over execution flow and system state. The project distinguishes itself through a transparent debugging layer designed to remain invisible to the target environment. It emp
Analyzes kernel-mode processes using a hypervisor to monitor memory and instruction flow without standard OS interfaces.