☆31Apr 2, 2026Updated 3 months ago
Alternatives and similar repositories for BioNTdrv
Users that are interested in BioNTdrv are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- bootkit驱动映射，三环进程注入加载指定模块☆13Oct 8, 2024Updated last year
- ApplyCalleeType IDA Plugin 🤙 — Reborn. Single-file port to IDA Pro 9.3 with right-click menu, live prototype editor, and full SAL/MSDN p…☆75Mar 9, 2026Updated 4 months ago
- C++ Alt syscall hook in 25h2 can be load by KDU☆26Feb 18, 2026Updated 4 months ago
- Usermode detector that catches indirect syscalls. Traps Hell's Hall, Tartarus' Gate, RecycledGate, and VEH syscalls & Many more.☆84Jun 15, 2026Updated 3 weeks ago
- This is similar to GdrvLoader but it works on EAC (& BE but same for GdrvLoader) with included gdrv.sys (cert)☆35Apr 23, 2026Updated 2 months ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Blocking Windows EDR agents by registering an own IPC-object in the Object Manager’s namespace (CVE-2023-3280, CVE-2024-5909, CVE-2024-20…☆37Feb 27, 2025Updated last year
- first public in-process reflective PE loader for .NET NativeAOT binaries. maps a NativeAOT executable into the current process and execut…☆28Mar 28, 2026Updated 3 months ago
- COM Windows Persistence Technique☆89Apr 27, 2026Updated 2 months ago
- Static analysis & exploitation-triage toolkit for Windows kernel drivers. Discover IOCTLs, Symbolic Links, and check cert , and Downlaods…☆191Apr 27, 2026Updated 2 months ago
- Demonstrates that NvAPI_D3D11_WksReadScanout (undocumented, interface 0xBCB1C536) can read the GPU scanout buffer directly, bypassing any…☆63Mar 8, 2026Updated 4 months ago
- ☆19May 1, 2025Updated last year
- This is a collection of proof-of-concept exploits for various targets.☆42Jun 10, 2026Updated last month
- Using the peculiar behaviour of the VPGATHER instructions to determine if an address will fault before it is truly accessed. All done in …☆58Dec 30, 2025Updated 6 months ago
- A powerful Windows UI monitoring and DNS exfiltration tool written in Rust, combining advanced UI event capture capabilities with secure …☆20Mar 6, 2025Updated last year
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Crystal Palace library for proxying Nt API calls via the Threadpool. Updated for call gadgets.☆23Nov 11, 2025Updated 8 months ago
- ☆28Jun 21, 2026Updated 3 weeks ago
- Kernel Information Disclosure☆35Jan 13, 2026Updated 6 months ago
- Diaphora, the most advanced Free and Open Source program diffing tool. with bninja support☆15May 14, 2026Updated 2 months ago
- LLVM based devirtualizer for the binaryshield software protector.☆81May 7, 2026Updated 2 months ago
- Proof of Concept CVE-2025-24990 (Agere Systems's driver)☆58Oct 31, 2025Updated 8 months ago
- ☆40Jun 4, 2026Updated last month
- Proof-of-Concept exploit for CVE-2026-32223☆21Apr 17, 2026Updated 2 months ago
- Windows kernel research tool. Looks like a debugger, but it is not a debugger. It uses a kernel driver to provide a WinDbg-like live kern…☆69Jul 7, 2026Updated last week
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- ☆35Apr 17, 2026Updated 2 months ago
- Using Chromium-based browsers as a proxy for C2 traffic.☆154Dec 6, 2025Updated 7 months ago
- Awesome MalDev Links☆76Jun 21, 2026Updated 3 weeks ago
- ☆37Nov 8, 2024Updated last year
- ExportHider: Generating Export Table during Runtime to Hide the Exported Functions from the DLL File.☆33Apr 12, 2026Updated 3 months ago
- monitors hidden syscalls called from call of duty anticheat☆90Jan 13, 2025Updated last year
- public index of IDA Pro plugins☆39Updated this week
- Ryūjin Protector - Is a Intel Arch - BIN2BIN - PE Obfuscation/Protection/DRM tool☆335Nov 20, 2025Updated 7 months ago
- ☆86Apr 8, 2026Updated 3 months ago
- Serverless GPU API endpoints on Runpod - Get Bonus Credits • AdSkip the infrastructure headaches. Auto-scaling, pay-as-you-go, no-ops approach lets you focus on innovating your application.
- Havoc C2 BOF port of the KslD.sys BYOVD technique. Credential extraction from lsass via physical memory — no OpenProcess, no auditable AP…☆142Apr 22, 2026Updated 2 months ago
- Have you ever wondered: what if IDA had great Ctrl+F search support for Pseudocode windows? No longer!☆82Mar 7, 2026Updated 4 months ago
- Modified Version of Melkor @FuzzySecurity capable of creating disposable AppDomains in injected processes.☆28Sep 8, 2021Updated 4 years ago
- Hells Hollow Windows 11 Rootkit technique to Hook the SSDT via Alt Syscalls☆252Updated this week
- HEVD Exploits for fun and learning.☆16Aug 30, 2025Updated 10 months ago
- ☆21Apr 6, 2025Updated last year
- A tool to decrypt all Synology encrypted archives (SPK, PAT, ...)☆21Jun 6, 2025Updated last year