Alternatives and similar repositories for SymbolicAccess:

Users that are interested in SymbolicAccess are comparing it to the libraries listed below

• Rythorndoran / PageTableHook
  ☆125Updated 2 years ago
• Oxygen1a1 / oxgenPdb
  a Windows kernel Pdb parsing and downloading library that running purely in kernel mode without any R3 programs.
  ☆148Updated 5 months ago
• 1401199262 / NMIStackWalk
  ☆71Updated 2 years ago
• cs1ime / sehcall
  Windows X64 mode use seh in manual mapped dll or manual mapped sys
  ☆70Updated 2 years ago
• xyddnljydd / vt-ReloadDbg
  ☆53Updated last year
• ilovecsad / veh_hide_memory
  ☆68Updated 2 years ago
• KelvinMsft / PerfMon
  first commit
  ☆57Updated 4 years ago
• 3499409631 / ReadPhysicalMemory-Without-API
  This project can bypass most of the AC except for some perverts that enable VT to monitor page tables
  ☆40Updated 9 months ago
• MiroKaku / Musa.Runtime
  The Universal C++ RunTime library, supporting kernel-mode C++ exception-handler and STL.
  ☆72Updated 3 months ago
• 1401199262 / MemoryVirtualization
  ☆162Updated 2 years ago
• armasm / dwmhook
  noob hooking dwm for overlay
  ☆75Updated 4 years ago
• samshine / VoyagerWithEPT
  ☆31Updated 2 years ago
• MiroKaku / Musa.Core
  Use ntdll/ntoskrnl to implement Kernel32, Advapi32 and other APIs. It includes user-mode and kernel-mode.
  ☆74Updated 3 months ago
• crtdll / bedaisy-reversal
  Some psuedo snippets from BattlEye's BEDaisy.sys loaded on Rainbow Six: Siege.
  ☆121Updated 2 years ago
• 2367765883 / hidedriver-normal
  ☆32Updated 4 months ago
• qq1045551070 / ShotHv
  ShotHv
  ☆133Updated 2 years ago
• SamuelTulach / DirectPageManipulation
  A basic demonstration of directly overwriting paging structures for physical memory r/w and interprocess memory copy
  ☆82Updated last year
• 76op / BaiyeDbg
  VT DEBUGGER
  ☆61Updated last year
• Oxygen1a1 / DrvMon
  a monitoring windows driver calls kernel api tools
  ☆102Updated 7 months ago
• cs1ime / KernelDwm
  Kernel dwm render
  ☆137Updated last year
• ThomasonZhao / InfinityHookProMax
  InfinityHookProMax: Make InfinityHook great great again
  ☆42Updated last year
• IcEy-999 / Ntoskrnl_Viewer
  可在非测试模式下符号化读取内核内存。Kernel memory can be read symbolically in non test mode。
  ☆107Updated 2 years ago
• rogxo / KernelHack
  Windows Kernel Misc
  ☆23Updated last year
• Kwansy98 / EasyPdb
  A very simple C++ library for download pdb, get rva of function, global variable and offset from struct.
  ☆132Updated 10 months ago
• LYingSiMon / InfinityHookProEx
  This is an extension to InfinityHookPro to support physical machine environments. (Win7 -> Win11 latest)
  ☆33Updated 2 years ago
• Yukin02 / Dwm-Overlay
  DWM Overlay without modify .text
  ☆65Updated 4 months ago
• Rythorndoran / dwm-overlay
  ☆92Updated 2 years ago
• SmoLL-iCe / VExDebugger
  A debugger library using VEH.
  ☆43Updated 5 months ago
• KANKOSHEV / Detect-KeAttachProcess
  Detect-KeAttachProcess by iterating through all processes as well as checking the context of the thread.
  ☆109Updated 3 years ago
• zoand / BOOM
  A Memory Read And Write the Hide Driver
  ☆65Updated 4 years ago