Ori Damari

windbg-cheat-sheet. My personal cheat sheet for using WinDbg for kernel debugging

etw-providers-docs. Document ETW providers

autochk-rootkit. Reverse engineered source code of the autochk rootkit

apc-research. APC Internals Research Code

ReversingMinesweeper. Reverse Engineering Minesweeper: Reconstruct Minesweeper Source Code

ida-plugins. A collection of my IDA plugins

shellcode2exe. Batch script to compile a binary shellcode blob into an exe file

windows-inspector. A driver to intercept low level windows events

windows-imports-searcher. Support Windows OS Reversing by searching easily for references to functions across many DLLs

snax86. A snake game written in x86 Assembly language for windows console

rpcmon. RPC Monitor based on The ETW Microsoft-Windows-Rpc provider

practical-reverse-engineering. Code for the solutions of practical reverse engineering

autoit-analysis. AutoIt Analysis Library: Parser & Emulator For Malware Researchers

set-critical-thread. Use NtSetInformationThread(ThreadBreakOnTermination) for anti-debugging

simple-os. Simple Protected Mode Kernel for i386

PE. PE.Parser, PE.Dumper, PE.Loader

auto-makefile. Generic Makefile Template with Automatic Dependency Generation

tracelogging-providers. A dump of all the trace logging providers from system32

checkpoint-ctf-2018. Solutions to the challenges of the checkpoint CSA CTF

simple-etw-provider. hello world ETW provider

real-kernel. 16 bit Real mode operating system kernel

repnz.github.io. The deployed version of my blog

windbg_js_scripts. Toy scripts for playing with WinDbg JS API

gamekid. Gameboy Emulation Library

c-streams. Wrapper for custom streams in the C language

supple. Supple way to load dynamic XML configuration files

bluehat-il-2019-slotd. BlueHat IL 2019 vulnerable debugging interface

pytreecli. A command line library that allows to build a tree structures command line easily

nc8-reversing-ctf. Solution to the NC8 CTF & nc8 instruction set emulation API

dotflow. DotNet Actor Model POC library

calculator-driver. Simple calculator windows driver