Alternatives and similar repositories for Hook-KdTrap

Users that are interested in Hook-KdTrap are comparing it to the libraries listed below

• MapleSwan / enum_real_dirbase

  View on GitHub
  从MmPfnData中枚举进程和页目录基址
  ☆205Aug 18, 2023Updated 2 years ago
• MapleSwan / PageTableHook

  View on GitHub
  ☆144Dec 10, 2022Updated 3 years ago
• wbaby / DoubleCallBack

  View on GitHub
  ☆184May 20, 2022Updated 3 years ago
• zouxianyu / query-pdb

  View on GitHub
  query-pdb is a server-side software for parsing PDB files. The software provides PDB online parsing service.
  ☆166Oct 27, 2025Updated 3 months ago
• cs1ime / KernelDwm

  View on GitHub
  Kernel dwm render
  ☆168Oct 10, 2023Updated 2 years ago
• jonomango / hv

  View on GitHub
  Lightweight Intel VT-x Hypervisor.
  ☆660Dec 17, 2024Updated last year
• 1401199262 / RemoteCall

  View on GitHub
  ☆193May 1, 2023Updated 2 years ago
• waryas / KACE

  View on GitHub
  Emulate Drivers in RING3 with self context mapping or unicorn
  ☆365Aug 18, 2022Updated 3 years ago
• Air14 / airhv

  View on GitHub
  Simple Intel VT-x hypervisor
  ☆359Dec 10, 2023Updated 2 years ago
• FiYHer / InfinityHookPro

  View on GitHub
  InfinityHookPro Win7 -> Win11 latest
  ☆551Feb 7, 2023Updated 3 years ago
• 1401199262 / NMIStackWalk

  View on GitHub
  ☆73Aug 31, 2022Updated 3 years ago
• rogxo / ReadPhys

  View on GitHub
  r/w virtual memory without attach
  ☆216Oct 19, 2023Updated 2 years ago
• stdhu / windows-kernel-pagehook

  View on GitHub
  windows kernel pagehook
  ☆41Oct 30, 2022Updated 3 years ago
• Air14 / SymbolicAccess

  View on GitHub
  Static user/kernel mode library that allows access to all functions and global variables by extracting offsets from the PDB
  ☆117May 29, 2025Updated 8 months ago
• SDXT / MMInject

  View on GitHub
  Kernel DLL Injector using NX Bit Swapping and VAD hide for hiding injected DLL
  ☆220Nov 12, 2020Updated 5 years ago
• BeneficialCode / WinArk

  View on GitHub
  Windows Anti-Rootkit Tool
  ☆542Dec 31, 2025Updated last month
• cutecatsandvirtualmachines / DmaProtect

  View on GitHub
  Shows an example of how to implement VT-d/AMD-Vi on Windows
  ☆162Sep 22, 2023Updated 2 years ago
• ekknod / acdrv

  View on GitHub
  base for testing
  ☆186Sep 28, 2024Updated last year
• DragonQuestHero / DwmDraw

  View on GitHub
  不使用3环挂钩进行DWM桌面绘制
  ☆82Dec 9, 2021Updated 4 years ago
• liangfei44 / VmWareThrough

  View on GitHub
  ☆225Feb 21, 2023Updated 2 years ago
• donnaskiez / ac

  View on GitHub
  kernel mode anti cheat
  ☆628Aug 4, 2024Updated last year
• jonomango / nohv

  View on GitHub
  Kernel driver for detecting Intel VT-x hypervisors.
  ☆192Jul 11, 2023Updated 2 years ago
• 1401199262 / HookHvcallCodeVa

  View on GitHub
  ☆23May 8, 2023Updated 2 years ago
• MiroKaku / libwsk

  View on GitHub
  The Kernel-Mode Winsock library, supporting TCP, UDP and Unix sockets (DGRAM and STREAM).
  ☆275Jan 27, 2025Updated last year
• BadPlayer555 / KernelGDIDraw

  View on GitHub
  The program draws with win32k gdi functions in the kernel while NtGdiDdDDISubmitCommand is being hooked.
  ☆342Apr 27, 2020Updated 5 years ago
• MiroKaku / ucxxrt

  View on GitHub
  The Universal C++ RunTime library, supporting kernel-mode C++ exception-handler and STL.
  ☆407Jul 12, 2024Updated last year
• momo5502 / ept-hook-detection

  View on GitHub
  🪝 Various EPT hook detection approaches
  ☆143Jul 29, 2025Updated 6 months ago
• KANKOSHEV / NoScreen

  View on GitHub
  Hiding the window from screenshots using the function win32kfull::GreProtectSpriteContent
  ☆624Dec 26, 2024Updated last year
• Oxygen1a1 / InfinityHook_latest

  View on GitHub
  etw hook (syscall/infinity hook) compatible with the latest Windows version of PG
  ☆320Apr 27, 2024Updated last year
• MiroKaku / DetoursX

  View on GitHub
  Kernel-Mode extended version of https://github.com/microsoft/Detours
  ☆180Jun 1, 2025Updated 8 months ago
• KelvinMsft / kHypervisor

  View on GitHub
  kHypervisor is a lightweight bluepill-like nested VMM for Windows, it provides and emulating a basic function of Intel VT-x
  ☆443Nov 29, 2021Updated 4 years ago
• Deputation / pagewalkr

  View on GitHub
  An x64 page table iterator written in C++ as a kernel mode windows driver.
  ☆119May 25, 2021Updated 4 years ago
• IcEy-999 / Drv_Hide_And_Camouflage

  View on GitHub
  ☆307May 11, 2023Updated 2 years ago
• Oxygen1a1 / oxgenPdb

  View on GitHub
  a Windows kernel Pdb parsing and downloading library that running purely in kernel mode without any R3 programs.
  ☆176Sep 13, 2024Updated last year
• IcEy-999 / Ntoskrnl_Viewer

  View on GitHub
  可在非测试模式下符号化读取内核内存。Kernel memory can be read symbolically in non test mode。
  ☆109Sep 1, 2022Updated 3 years ago
• KANKOSHEV / Detect-HiddenThread-via-KPRCB

  View on GitHub
  Detect removed thread from PspCidTable.
  ☆75Mar 18, 2022Updated 3 years ago
• fIappy / infhook19041

  View on GitHub
  ☆127May 23, 2020Updated 5 years ago
• KelvinMsft / PerfMon

  View on GitHub
  first commit
  ☆64Oct 29, 2020Updated 5 years ago
• Barracudach / CallStack-Spoofer

  View on GitHub
  This tool will allow you to spoof the return addresses of your functions as well as system functions.
  ☆547Nov 12, 2022Updated 3 years ago