Alternatives and similar repositories for registry-callbacks

Users that are interested in registry-callbacks are comparing it to the libraries listed below

• 0xf1a / DSMM

  View on GitHub
  Discarded Section Manual Map
  ☆68Jun 18, 2020Updated 5 years ago
• EBalloon / Rw-No-Attach

  View on GitHub
  ☆159May 21, 2024Updated last year
• veryboreddd / Return-address-spoofer

  View on GitHub
  Illustrates the concept of return address spoofing, and how it is used.
  ☆14May 13, 2020Updated 5 years ago
• helloobaby / wow-IAT-fix

  View on GitHub
  fix wow obfucated IAT
  ☆10Aug 4, 2021Updated 4 years ago
• EBalloon / MapPage

  View on GitHub
  Mapping your code on a 0x1000 size page
  ☆71May 20, 2022Updated 3 years ago
• stuxnet147 / Win-Kernel-PiDqSerializationWrite-Example

  View on GitHub
  How to use PiDqSerializationWrite. Introduces how to safely read and write from mapped driver
  ☆26May 29, 2023Updated 2 years ago
• EBalloon / ThreadNotify

  View on GitHub
  ☆12Oct 12, 2021Updated 4 years ago
• boom-cr3 / Shared-FlushFileBuffers-Communication

  View on GitHub
  Cool kernel communication method.
  ☆100Jun 27, 2021Updated 4 years ago
• pTerrance / full-kernel-driver

  View on GitHub
  ☆147Dec 28, 2020Updated 5 years ago
• xPasters / .data-ptr-swap

  View on GitHub
  i stole this from some guys private repo on github
  ☆58Jul 11, 2021Updated 4 years ago
• gmh5225 / HideDriverTesting

  View on GitHub
  Only for Stress-Testing
  ☆26Apr 9, 2022Updated 3 years ago
• weak1337 / PresentHookDetection

  View on GitHub
  ☆84Apr 1, 2022Updated 3 years ago
• 1401199262 / CheatEngine_Bypass

  View on GitHub
  ☆27Jun 24, 2022Updated 3 years ago
• lennyRBLX / window_hijack

  View on GitHub
  Rendering on external windows via hijacking thread contexts, with notes on ValidateHwnd
  ☆14Jul 9, 2020Updated 5 years ago
• Sinclairq / DataCommunication

  View on GitHub
  A kernelmode driver swapping a .data pointer in the kernel to perform communication between the kernel and usermode.
  ☆143Oct 20, 2020Updated 5 years ago
• armasm / EasyAntiPatchGuard

  View on GitHub
  Easy Anti PatchGuard
  ☆223Apr 9, 2021Updated 4 years ago
• SamuelTulach / voidmap

  View on GitHub
  Using CVE-2021-40449 to manual map kernel mode driver
  ☆104Mar 5, 2022Updated 3 years ago
• armvirus / SinMapper

  View on GitHub
  usermode driver mapper that forcefully loads any signed kernel driver (legit cert) with a big enough section (example: .data, .rdata) to …
  ☆469Jan 3, 2022Updated 4 years ago
• KANKOSHEV / Detect-HiddenThread-via-KPRCB

  View on GitHub
  Detect removed thread from PspCidTable.
  ☆75Mar 18, 2022Updated 3 years ago
• weak1337 / NO_ACCESS_Protection

  View on GitHub
  ☆192Dec 8, 2021Updated 4 years ago
• kkent030315 / kdump

  View on GitHub
  A kernel module dumper for Windows x64 using mhyprot vulnerable driver
  ☆37Oct 26, 2020Updated 5 years ago
• Zpes / pte-protect

  View on GitHub
  ☆37May 21, 2022Updated 3 years ago
• weak1337 / ModExMap

  View on GitHub
  ☆25Aug 9, 2021Updated 4 years ago
• Compiled-Code / be-injector

  View on GitHub
  ☆223May 10, 2022Updated 3 years ago
• Rogue619Z / Manual-Map-Injector

  View on GitHub
  I've developed a rather effective driver for DLL injection targeting EAC Protected Games, and since i dont care for any notable games uti…
  ☆103Apr 24, 2024Updated last year
• Zpes / syscall-direct

  View on GitHub
  ☆36Mar 27, 2022Updated 3 years ago
• Compiled-Code / eac-mapper

  View on GitHub
  undetected eac mapper
  ☆169May 3, 2022Updated 3 years ago
• xu-Wan / HypercallPageHook

  View on GitHub
  POC Hook of nt!HvcallCodeVa
  ☆54May 8, 2023Updated 2 years ago
• ekknod / sumap

  View on GitHub
  manually map driver for a signed driver memory space
  ☆171Mar 11, 2021Updated 4 years ago
• VollRagm / lpmapper

  View on GitHub
  A mapper that maps shellcode into loaded large page drivers
  ☆318Apr 26, 2022Updated 3 years ago
• charliewolfe / Stealthy-Kernelmode-Injector

  View on GitHub
  Manual mapper that uses PTE manipulation, Virtual Address Descriptor (VAD) manipulation, and forceful memory allocation to hide executabl…
  ☆382Jan 29, 2022Updated 4 years ago
• yqsy / VT_demo

  View on GitHub
  ☆28Nov 20, 2017Updated 8 years ago
• Spuckwaffel / Kernel-Thread-Driver

  View on GitHub
  This is a simple project of a driver + usermode.
  ☆169Jan 31, 2022Updated 4 years ago
• EBalloon / Common-Registry

  View on GitHub
  ☆49Mar 29, 2022Updated 3 years ago
• 1401199262 / InstrumentationCallback

  View on GitHub
  ☆29Dec 29, 2022Updated 3 years ago
• ekknod / Nmi

  View on GitHub
  Old way for blocking NMI interrupts
  ☆29Sep 6, 2022Updated 3 years ago
• Rat431 / ColdHide_V2

  View on GitHub
  A mini anti-anti debug hooking library for Windows.
  ☆106Jan 3, 2021Updated 5 years ago
• ch4ncellor / Inline-PatchFinder

  View on GitHub
  comparing data of module exports from disk and memory, then caching any differences.
  ☆26Dec 11, 2021Updated 4 years ago
• 1401199262 / Hook-KdTrap

  View on GitHub
  ☆223Mar 11, 2023Updated 2 years ago