IOCTL-Explorer

This script was made and tested using Ghidrathon

How to install - Java Version

• Drop the .java fle inside your $USER_HOME/ghidra_scripts folder
• Reload Scripts
• Script manager > Windows > ioctl_explorer.java

How to install - Ghidrathon Version

• Just drop the .py file inside of your $USER_HOME/ghidra_scripts folder and reload your scripts
• It will be in the Script Manager, under Python3

How to use

• Select anywhere inside of the IRP_MJ_DEVICE_CONTROL handle function
• Run the script