BeneficialCode/WmipCodeSamples external links

---

GitHub - View repository

GitHub.dev - Open in online code editor

Star history - Growth chart over time

deps.dev - Dependencies and security vulnerabilities

Gitingest - Export source code for LLM usage

Repomix - Export source code for LLM usage

uithub - Export source code for LLM usage

Close

BeneficialCode/WmipCodeSamples

Readme badge preview -

If you own this repo, copy the snippet below and add it to your README.md

---

Copy

[![RelatedRepos](https://img.shields.io/badge/related-repos-yellow)](https://relatedrepos.com/gh/BeneficialCode/WmipCodeSamples)

Close

BeneficialCode / WmipCodeSamplesView on GitHubMore

• External links
• Readme badge

What makes it page

☆17Aug 24, 2022Updated 3 years ago

Alternatives and similar repositories for WmipCodeSamples

Users that are interested in WmipCodeSamples are comparing it to the libraries listed below

• KernelPanic-OpenSource / Win2K3_NT_drivers

  View on GitHub
  Windows Server 2K3 NT 5
  ☆12Apr 14, 2021Updated 4 years ago
• ganboing / shim_test

  View on GitHub
  ☆15Mar 28, 2015Updated 10 years ago
• helloobaby / infinityhookEx

  View on GitHub
  hook system call that on user mode
  ☆12Jan 27, 2022Updated 4 years ago
• yedushusheng / FileEncryption

  View on GitHub
  File encryption based on DES and blowfish
  ☆15May 29, 2025Updated 8 months ago
• ByteWhite1x1 / PatchGuardResearch

  View on GitHub
  Bypassing kernel patch protection runtime
  ☆22Feb 19, 2023Updated 3 years ago
• luodh / ffmpeg_record_screen

  View on GitHub
  GDI截屏,ffmpeg编码存储视频
  ☆12Jun 27, 2019Updated 6 years ago
• bytesundso / SneakCalls

  View on GitHub
  direct systemcalls with a modern c++20 interface.
  ☆45Jan 6, 2023Updated 3 years ago
• j321521621 / pipemonitor

  View on GitHub
  管道监视器,类似于spyxx之类的东西,一般用于监视目标进程的系统调用.关键词:detours+piep
  ☆23Feb 26, 2014Updated 12 years ago
• Zero-Tang / SimpleWhpDemo

  View on GitHub
  Simple Demo of using Windows Hypervisor Platform
  ☆29Jul 14, 2025Updated 7 months ago
• alfarom256 / UserVAtoPhysical

  View on GitHub
  Walks the Process' VAD list to grab the PTE's corresponding to a usermode virtual address, all to get the physical address
  ☆23Nov 22, 2021Updated 4 years ago
• trailofbits / WinDbg-JS

  View on GitHub
  ☆29Nov 22, 2023Updated 2 years ago
• haidragon / processrefund

  View on GitHub
  新的注入方式
  ☆11Sep 30, 2018Updated 7 years ago
• Lima-X / XOrCryptEx

  View on GitHub
  XOrCryptEx lightweight C Utility/Algorithm
  ☆11Mar 3, 2022Updated 3 years ago
• kanren3 / DllInject

  View on GitHub
  DllInject (Memory Load)
  ☆11Jan 5, 2019Updated 7 years ago
• SamuelTulach / GetDeviceInterfacesMemoryLeak

  View on GitHub
  Small memory leak PoC that is happening in IopGetDeviceInterfaces
  ☆25Oct 18, 2020Updated 5 years ago
• SigalHu / PCIEDriver

  View on GitHub
  基于WDK的PCIE驱动程序及测试软件
  ☆44May 9, 2017Updated 8 years ago
• KunYi / WDK7.1-Samples

  View on GitHub
  Backup Windows 7.1 WDK sample for study
  ☆26Aug 26, 2018Updated 7 years ago
• dennisbabkin / InjectAll

  View on GitHub
  Tutorial & a blog post that demonstrate how to code a Windows driver to inject a custom DLL into all running processes. I coded it from s…
  ☆142Aug 2, 2021Updated 4 years ago
• shubham0d / SymBlock

  View on GitHub
  A windows kernel driver to Block symbolic link exploit used for privilege escalation.
  ☆15Jul 30, 2020Updated 5 years ago
• punishell / WindowsLegacyCVE

  View on GitHub
  ☆10Nov 11, 2020Updated 5 years ago
• omgkaka / vmp_runner

  View on GitHub
  A general solution to simulate execution of virtualized instructions (vmprotect/themida, etc.).
  ☆77Feb 9, 2022Updated 4 years ago
• 474172261 / DataProtector

  View on GitHub
  A simple ransomware defender.It uses minifilter to filt "rewrite" and "delete" events in kernel.And it handles event in user mode.
  ☆27Aug 14, 2018Updated 7 years ago
• mackiiN / KernelHackBase

  View on GitHub
  ☆47Nov 26, 2020Updated 5 years ago
• sgabe / SymlinkProtect

  View on GitHub
  File system minifilter driver for Windows to block symbolic link attacks.
  ☆51Dec 16, 2020Updated 5 years ago
• codereba / netmon

  View on GitHub
  network filter driver that control network send speed, based on windows tdi framework.
  ☆31Feb 16, 2024Updated 2 years ago
• hostzhen / sysark

  View on GitHub
  Sysark全称system anti-rootkit，是我学习内核写的工具（2013年的代码，后续不会再更新），里面基本上所有的功能都是用内核实现的。这里只是实现了反rootkit部分功能，作为工具的话，本人觉得还欠完善，但作为学习，或有人需要。目前针对的是XP SP2，…
  ☆27Dec 26, 2017Updated 8 years ago
• wjcsharp / hf-2011

  View on GitHub
  Automatically exported from code.google.com/p/hf-2011
  ☆15Feb 12, 2016Updated 10 years ago
• vopi181 / WindowsReadWriteMemDriver

  View on GitHub
  ☆10Oct 3, 2016Updated 9 years ago
• xjlzyi / gameplug

  View on GitHub
  pass game protect
  ☆12Apr 26, 2014Updated 11 years ago
• tpn / windows-nt-file-system-internals-book

  View on GitHub
  Source code on the 1.44MB 3.5 floppy accompanying the Windows NT File System Internals book.
  ☆20Jul 31, 2019Updated 6 years ago
• enoorez / dbg3

  View on GitHub
  window
  ☆13Feb 24, 2017Updated 9 years ago
• armasm / dwmhook

  View on GitHub
  noob hooking dwm for overlay
  ☆84Nov 24, 2020Updated 5 years ago
• SHA-MRIZ / FsMinfilterHooking

  View on GitHub
  ☆33Dec 22, 2020Updated 5 years ago
• zhihanyue / anti-ransomware-minifilter

  View on GitHub
  A minifilter driver for detecting and blocking ransomware virus
  ☆27Mar 4, 2018Updated 7 years ago
• shines77 / Antinvader2015

  View on GitHub
  An minifilter-based transparent encryptor on Windows.
  ☆30Feb 27, 2017Updated 9 years ago
• hackflame / ida_python_extractCode

  View on GitHub
  ida提取特征码脚本
  ☆56Nov 30, 2019Updated 6 years ago
• 0mWindyBug / MinifilterHook

  View on GitHub
  silence file system monitoring components by hooking their minifilters
  ☆60Jan 31, 2024Updated 2 years ago
• panoramixor / GDIObjDump

  View on GitHub
  ☆29Sep 18, 2015Updated 10 years ago
• gmh5225 / kcpplib

  View on GitHub
  The driver STL library used by myself
  ☆13Oct 19, 2022Updated 3 years ago