NTKernelWalkerLib is a self contained library for resolving kernel offsets from user mode. It wraps dbghelp to fetch RVAs of exported symbols from ntoskrnl.exe and adds a lightweight image mapper that can scan executable sections to find short ROP gadgets such as “pop rcx ; ret” or “jmp rax”. The library exposes two main groups of functions: - View it on GitHub
Star
0
Rank
13993518