contact@kplugs.org

http://www.kplugs.org/

KPlugs is a Linux kernel module which provides an interface for dynamically executing scripts inside the Linux kernel. KPlugs uses a simple bytecode interpreter (the KPlugs Virtual Machine), and an interface that allows a user to dynamically load scripts into the kernel and execute them directly from user space. Because the interface is dynamic, it's easy to implement a user-mode library that wraps anything in the kernel!

KPlugs comes with a Python library that compiles a subset of the Python language to the KPlugs bytecode, and lets you easily load and execute your "kernel Python script".

The Python compiler is very basic and was made to fit our own purposes, but if it's not exactly what you are looking for, you can modify it to create your own subset.

???

Examples

Jeff Forristal

https://code.google.com/p/lola-linux/

lola-linux

Linux kernel module to provide low level (hardware) access, for hardware research and driver prototyping purposes. Provides full memory access (physical DRAM + MMIO), IO, MSR, CPUID, and PCI config space.

???

???

Team (http://pykd.codeplex.com/team/view)

http://pykd.codeplex.com/

WinDBG

Python extension for WinDbg. pykd not repeat functional from Debug Engine, and implements the API, convenient for daily work in WinDbg.

shadow
ALF
pyInspector
vtfinder
heap_trace
uni-trace

Official documentation
Blog about pykd (RU)
Soft Function Hooking with windbg and pykd