Alternatives and similar repositories for DriverBase

Users that are interested in DriverBase are comparing it to the libraries listed below

• DaedalusFrame / Nemesis
  Windows kernel driver that detects hypervisors by probing SIDT/LIDT edge cases, paging/TLB behaviors, privilege transitions, and timing e…
  ☆35Updated last month
• cutecatsandvirtualmachines / DDMA
  Disk based DMA for ATA and SCSI
  ☆41Updated 2 years ago
• stuxnet147 / luna-1
  ☆17Updated 5 years ago
• xtremegamer1 / Illicit-memory-allocation
  This driver hooks a device object for ioctl and uses mdls to allocate physical pages and manually injects an entry into a process's page …
  ☆15Updated 2 years ago
• iqrw0 / DieDMAProtection
  ☆29Updated last year
• emlinhax / tableflipper
  partially disable patchguard up to win11 21H2
  ☆19Updated last year
• xu-Wan / HypercallPageHook
  POC Hook of nt!HvcallCodeVa
  ☆54Updated 2 years ago
• Peribunt / VPGATHER
  Using the peculiar behaviour of the VPGATHER instructions to determine if an address will fault before it is truly accessed. All done in …
  ☆50Updated last month
• ekknod / KiSystemStartupMeme
  Custom KiSystemStartup, can be used to modificate kernel before boot.
  ☆53Updated 3 years ago
• backengineering / vmhook
  A demonstration of hooking into the VMProtect-2 virtual machine
  ☆23Updated 2 years ago
• asteria121 / HalPrivateDispatchTableHook
  Hook syscalls from ring0 without triggering PatchGuard
  ☆22Updated 3 months ago
• Oliver-1-1 / DumpDriver
  ☆46Updated last year
• ekknod / Nmi
  Old way for blocking NMI interrupts
  ☆29Updated 3 years ago
• Nou4r / PresentInjector
  A simple present scene, kernel allocation injector.
  ☆26Updated 3 years ago
• Peribunt / CTC
  Interprocess communication via a covert timing channel
  ☆26Updated 3 months ago
• helloobaby / Nmi-Callback
  detect hypervisor with Nmi Callback
  ☆42Updated 3 years ago
• POPFD / HypervisorBase
  A library for intel VT-x hypervisor functionality supporting EPT shadowing.
  ☆51Updated 4 years ago
• misslng / boundcallback
  ☆35Updated 2 years ago
• Nitr0-G / SVM-Hypervisor
  This is a ring -1 header framework in order to simplify the creation of hypervisors on SVM
  ☆27Updated 2 years ago
• BeneficialCode / KReClassEx
  Kernel ReClassEx
  ☆66Updated 2 years ago
• ReverseSec / eryx
  Collection of Cheat dumps for Research and Detection.
  ☆16Updated last month
• cMiraka / RWCommunication
  ☆43Updated 2 years ago
• archercreat / vdk
  vdk is a set of utilities used to help with exploitation of a vulnerable driver.
  ☆45Updated 3 years ago
• veryboreddd / Return-address-spoofer
  Illustrates the concept of return address spoofing, and how it is used.
  ☆14Updated 5 years ago
• LabGuy94 / Diskjacker
  Hijacking Hyper-V at Runtime with DDMA
  ☆76Updated 5 months ago
• Oliver-1-1 / EtwKeyboardDetection
  ☆37Updated last year
• 1401199262 / HookSwapContext
  ☆34Updated 2 years ago
• 1401199262 / NMIStackWalk
  ☆73Updated 3 years ago
• Xyrem / Arbitrary-Physical-Memory-RW
  ☆38Updated 3 years ago
• Sentient111 / ClearDriverTraces
  clearing traces of a loaded driver
  ☆47Updated 3 years ago