Alternatives and similar repositories for HookSwapContext

Users that are interested in HookSwapContext are comparing it to the libraries listed below

• 1401199262 / HookHvcallCodeVa

  View on GitHub
  ☆23May 8, 2023Updated 2 years ago
• xinnie-the-pooh / MS

  View on GitHub
  巨硬
  ☆17Oct 4, 2023Updated 2 years ago
• gmh5225 / S4Mapper

  View on GitHub
  Not mine, just saved
  ☆14Nov 12, 2023Updated 2 years ago
• gmh5225 / Hook-HvlSwitchVirtualAddressSpace

  View on GitHub
  Not mine. Only for saving
  ☆26Jun 28, 2022Updated 3 years ago
• 1401199262 / NMIStackWalk

  View on GitHub
  ☆73Aug 31, 2022Updated 3 years ago
• hugsy / shared-kernel-user-section-driver

  View on GitHub
  Experiment to use sections as User/Kernelmode comm vector
  ☆22Apr 7, 2023Updated 2 years ago
• xu-Wan / HypercallPageHook

  View on GitHub
  POC Hook of nt!HvcallCodeVa
  ☆54May 8, 2023Updated 2 years ago
• pTerrance / alpc-km-um

  View on GitHub
  POC usermode <=> kernel communication via ALPC.
  ☆70Jun 6, 2024Updated last year
• EBalloon / Remap

  View on GitHub
  ☆49Feb 21, 2022Updated 3 years ago
• 1401199262 / InstrumentationCallback

  View on GitHub
  ☆29Dec 29, 2022Updated 3 years ago
• MapleSwan / SessionMapper

  View on GitHub
  将驱动映射到会话空间
  ☆38Aug 27, 2022Updated 3 years ago
• 1401199262 / RemoteCall

  View on GitHub
  ☆193May 1, 2023Updated 2 years ago
• ExpLife0011 / KeUserModeCallBack

  View on GitHub
  A Simple Example
  ☆23Nov 30, 2018Updated 7 years ago
• KANKOSHEV / Detect-HiddenThread-via-KPRCB

  View on GitHub
  Detect removed thread from PspCidTable.
  ☆75Mar 18, 2022Updated 3 years ago
• Sinclairq / tp-emulator

  View on GitHub
  A basic 100 loc CPU emulator using the existing code of ntoskrnl.exe
  ☆75Aug 16, 2023Updated 2 years ago
• cs1ime / DICHook

  View on GitHub
  Hook NtDeviceIoControlFile with PatchGuard
  ☆107May 10, 2022Updated 3 years ago
• armvirus / DriverDllFInder

  View on GitHub
  search for a driver/dll module that has a wanted section bigger than the size of your image
  ☆20Aug 14, 2021Updated 4 years ago
• ZEROWyt / Patchguard-2023

  View on GitHub
  ☆23Jul 24, 2023Updated 2 years ago
• YouNeverKnow00 / Disable-nmi-callbacks

  View on GitHub
  Disable NMI Callbacks with Kernelmode Driver
  ☆18Mar 15, 2023Updated 2 years ago
• MapleSwan / enum_real_dirbase

  View on GitHub
  从MmPfnData中枚举进程和页目录基址
  ☆205Aug 18, 2023Updated 2 years ago
• niemand-sec / ReClass.NET-DriverReader

  View on GitHub
  Plugin for ReClass.Net (using vulnerable driver to read process memory)
  ☆94Jan 2, 2020Updated 6 years ago
• Oliver-1-1 / MouseDetection

  View on GitHub
  ☆34Mar 3, 2024Updated last year
• ch4ncellor / Inline-PatchFinder

  View on GitHub
  comparing data of module exports from disk and memory, then caching any differences.
  ☆26Dec 11, 2021Updated 4 years ago
• ekknod / acdrv

  View on GitHub
  base for testing
  ☆186Sep 28, 2024Updated last year
• qq1045551070 / IoCommon

  View on GitHub
  IO隐藏通信封装
  ☆17May 31, 2021Updated 4 years ago
• kkent030315 / CiGetCertPublisherName

  View on GitHub
  An example code of CiGetCertPublisherName
  ☆17Mar 24, 2022Updated 3 years ago
• stonedreamforest / Tstl

  View on GitHub
  The kernel mode Standard Template Library Template
  ☆19Feb 22, 2020Updated 5 years ago
• 1401199262 / CheatEngine_Bypass

  View on GitHub
  ☆27Jun 24, 2022Updated 3 years ago
• Xyrem / Yumekage

  View on GitHub
  Demo proof of concept for shadow regions, and implementation of HyperDeceit.
  ☆313May 31, 2023Updated 2 years ago
• KANKOSHEV / Detect-MouseClassServiceCallback

  View on GitHub
  mouseclassservicecallback detection via hook
  ☆52Feb 7, 2022Updated 4 years ago
• alfarom256 / MinifilterResearch

  View on GitHub
  ☆16Oct 31, 2022Updated 3 years ago
• 1401199262 / Hook-KdTrap

  View on GitHub
  ☆223Mar 11, 2023Updated 2 years ago
• ilovecsad / dwmhook

  View on GitHub
  ☆14Dec 3, 2022Updated 3 years ago
• SamuelTulach / vmcheck

  View on GitHub
  ☆23Oct 28, 2020Updated 5 years ago
• utoni / KMemDriver

  View on GitHub
  A Windows Memory driver for game hacking purposes. Supports manual mapping with BlackBone and PastDSE.
  ☆43Apr 23, 2021Updated 4 years ago
• stdhu / windows-kernel-pagehook

  View on GitHub
  windows kernel pagehook
  ☆41Oct 30, 2022Updated 3 years ago
• IcEy-999 / Kernel-Special-APC-ReadProcessMemory

  View on GitHub
  Example of reading process memory through kernel special APC
  ☆110Apr 21, 2023Updated 2 years ago
• cs1ime / sehcall

  View on GitHub
  Windows X64 mode use seh in manual mapped dll or manual mapped sys
  ☆80Oct 10, 2022Updated 3 years ago
• nmgwddj / A-Protect

  View on GitHub
  ☆24Feb 18, 2018Updated 7 years ago