BeneficialCode / WinArk
Windows Anti-Rootkit Tool
☆496Updated last month
Alternatives and similar repositories for WinArk
Users that are interested in WinArk are comparing it to the libraries listed below
Sorting:
- InfinityHookPro Win7 -> Win11 latest☆520Updated 2 years ago
- Hook system calls on Windows by using Kaspersky's hypervisor☆1,180Updated last year
- Turn off PatchGuard in real time for win7 (7600) ~ later☆1,013Updated 3 years ago
- Radical Windows ARK☆234Updated 3 weeks ago
- Collection of undocumented Windows API declarations.☆314Updated last month
- System call hook for Windows 10 20H1☆487Updated 3 years ago
- ☆509Updated 5 years ago
- Using Driver Global Injection dll, it can hide DLL modules☆522Updated 5 years ago
- VMProtect 3.x Anti-debug Method Improved☆582Updated 6 years ago
- MemoryModule which compatible with Win32 API and support exception handling☆397Updated 3 months ago
- Kernel Anit Anit Debug Plugins 内核反反调试插件☆464Updated 3 years ago
- x64dbg plugin to bypass Themida 3.x Anti-Debugger / VM / Monitoring programs checks (x64)☆520Updated 4 years ago
- Hypervisor based anti anti debug plugin for x64dbg☆1,383Updated 10 months ago
- A x64 Windows Rootkit using SSDT or Hypervisor hook☆536Updated 4 months ago
- kernel-mode Anti-Anti-Debug plugin. based on intel vt-x && ept technology☆438Updated 4 years ago
- VirtualKD-Redux - A revival and modernization of VirtualKD☆888Updated 10 months ago
- Defeating Patchguard universally for Windows 8, Windows 8.1 and all versions of Windows 10 regardless of HVCI.☆870Updated 5 years ago
- Titan is a VMProtect devirtualizer☆29Updated last year
- Unicorn PE is an unicorn based instrumentation project designed to emulate code execution for windows PE files.☆840Updated last year
- The Kernel-Mode Winsock library, supporting TCP, UDP and Unix sockets (DGRAM and STREAM).☆247Updated 3 months ago
- The Universal C++ RunTime library, supporting kernel-mode C++ exception-handler and STL.☆401Updated 10 months ago
- ☆199Updated 2 years ago
- Windows inline hooking tool.☆268Updated 6 years ago
- ☆272Updated 2 years ago
- This program remaps its image to prevent the page protection of pages contained in the image from being modified via NtProtectVirtualMemo…☆598Updated 6 years ago
- VMProtect 2.x-3.x x64 Import Deobfuscator☆296Updated last year
- A flexible PE loader, loading module in memory. Most of the functions can be inline, compatible for shellcode.☆196Updated 2 months ago
- VMUnprotect.Dumper can dynamically untamper VMProtected Assembly.☆397Updated 2 years ago
- Manual mapping without creating any threads, with rw only access☆743Updated 5 years ago
- 一些使用过期或者注销证书的技术☆237Updated 5 years ago