NTOSKrnlWalker - Interactive Kernel ROP walker

Check out our Technical Training Courses on Windows Kernel Exploitation

---

An interactive C++ console tool that uses dbghelp and pulls the PDB symbols from Microsoft for ntoskrnl.exe. 

Resolve kernel offsets, dump struct layouts, and scan the mapped nt image for gadgets (address ? text and text ? address). Voila!

Why this tool: It saves you time and helps you build gadgets, get offsets, and navigate kernel structures for your target build much easier/faster.

Typically, you would use a workflow like this: Vergilius Project + WinDBG (target/debugger) + rp-win (or an alternative) + MS symbols.

So I decided to save myself some time in the future.

Sharing is caring, so here you go: https://github.com/jsacco/ntoskrnlwalker/tree/main