ags-cfb

This project is CFB (Canadian Furious Beaver), a Windows kernel-mode IRP (I/O Request Packet) monitoring framework. It installs a filter driver that hooks the IRP dispatch table of target drivers, log

SKILL.md

GitHub

CFB

Author: hugsy Source: mcp-gamehacking/skills/ags-cfb

Description

This project is CFB (Canadian Furious Beaver), a Windows kernel-mode IRP (I/O Request Packet) monitoring framework. It installs a filter driver that hooks the IRP dispatch table of target drivers, logging all IRP requests with parameters, buffers, and return values. The C kernel driver and Python client allow real-time monitoring of driver communication for reverse engineering IOCTL interfaces. It is aimed at Windows kernel researchers and reverse engineers studying driver communication protocols and IOCTL fuzzing.

Related in security

git-workflow

Git workflow guidance for commits, branches, and pull requests

by agno-agi
37,144

clerk-observability

Implement monitoring, logging, and observability for Clerk authentication. Use when setting up monitoring, debugging aut...

by jeremylongshore
1,061

juicebox-migration-deep-dive

Advanced Juicebox data migration strategies. Use when migrating from other recruiting platforms, performing bulk data im...

by jeremylongshore
1,061