Petr Beneš

hvpp. hvpp is a lightweight Intel x64/VT-x hypervisor written in C++ focused primarily on virtualization of already running operating system

injdrv. proof-of-concept Windows Driver for injecting DLL into user-mode processes using APC

pdbex. pdbex is a utility for reconstructing structures and unions from the PDB into compilable C headers

DetoursNT. Detours with just single dependency - NTDLL

KSOCKET. KSOCKET provides a very basic example how to make a network connections in the Windows Driver by using WSK

mini-tor. proof-of-concept implementation of tor protocol using Microsoft CNG/CryptoAPI

python-graceful-shutdown. Example of a Python code that implements graceful shutdown while using asyncio, threading and multiprocessing

scfw. A cross-platform C++ framework for building Windows shellcode

EtwConsumerNT. Simple project that demonstrates how an ETW consumer can be created just by using NTDLL

synology-nas-monitoring.

woftool. woftool is a proof-of-concept utility for creating WOF-compressed files

htop. htop is an interactive text-mode process viewer for Unix systems. It aims to be a better 'top'.

avmext. Anti-Anti-VM solution via Windows Driver

pydemangler. pydemangler is a Python3 package for demangling MSVC & Itanium C++ symbols

awesome-virtualization. Collection of resources about Virtualization

template-sln. C

vs-tor. Tor solution for Visual Studio 2015

wbenny.github.io. HTML

vcrtl. C++ Exceptions in Windows Drivers

CiDllDemo. Use ci.dll API for validating Authenticode signature of files

intervalmap. An interval set/map library inspired by Boost.Icl

systeminformer. A free, powerful, multi-purpose tool that helps you monitor system resources, debug software and detect malware. Brought to you by Winsider Seminars & Solutions, Inc. @ http://www.windows-internals.com

SimpleVisor. SimpleVisor is a simple, portable, Intel VT-x hypervisor with two specific goals: using the least amount of assembly code (10 lines), and having the smallest amount of VMX-related code to support dynamic hyperjacking and unhyperjacking (that is, virtualizing the host state from within the host). It works on Windows and UEFI.

cached. Rust cache structures and easy function memoization

cuckoo-modified. Modified edition of cuckoo

container-4-ctors. Materialy k C++ meetupu Container #4

windows-rs. Rust for Windows

izp-proj1. Automatically exported from code.google.com/p/izp-proj1

vnc-rs. An asynchronous implementation of VNC client side protocol

yara. The pattern matching swiss knife

tokio-adjustable-timeout. Rust