Alternatives and similar repositories for SSDT_HOOK:

Users that are interested in SSDT_HOOK are comparing it to the libraries listed below

• zhuhuibeishadiao / KernelHooksDetection_x64
  x64 Kernel Hooks Detection
  ☆24Updated 8 years ago
• MoePus / AntiBEAntiDllInjection
  [POC Detected]Bypass BE Anti Dll Injection (POC/Need Driver)
  ☆14Updated 5 years ago
• OkazakiNagisa / VTbasedDebuggerWin7
  by others
  ☆38Updated 7 years ago
• DOGSHITD / IDTHook_X64
  Hook IDT vector 0xb2 to detect SCI in 64bit windows.
  ☆34Updated 2 years ago
• he4rtbleed / PPLL
  Protected Process Light Library
  ☆18Updated 4 years ago
• nmgwddj / A-Protect
  ☆23Updated 7 years ago
• DeDf / WProtect
  ☆40Updated 5 years ago
• MiroKaku / Learning-Example
  For Example. See Miro's Blog
  ☆30Updated 2 years ago
• Eva1216 / VT
  ☆26Updated 7 years ago
• yawenok / SSDT-Hook
  The windows kernel ssdt hook demo
  ☆16Updated 6 years ago
• whitephone / Windows-Rootkits
  ☆26Updated 7 years ago
• bronzeMe / SSDT_Hook_x64
  ☆36Updated 8 years ago
• qiantangbanmu / WProtectvs
  ☆23Updated 7 years ago
• kanren3 / DllInject
  DllInject (Memory Load)
  ☆10Updated 6 years ago
• Frenda / libScanHook
  ☆46Updated 7 years ago
• TaoistBrickscarrier / WFPKit
  粗暴地枚举管理内核的WFP对象。 Manage kernel WFPs in a brutal way.
  ☆26Updated 7 years ago
• hostzhen / sysark
  Sysark全称system anti-rootkit，是我学习内核写的工具（2013年的代码，后续不会再更新），里面基本上所有的功能都是用内核实现的。这里只是实现了反rootkit部分功能，作为工具的话，本人觉得还欠完善，但作为学习，或有人需要。目前针对的是XP SP2，…
  ☆27Updated 7 years ago
• changeofpace / x64dbg-Anti-Debug-POC
  viewing page boundaries of pages with PAGE_NOACCESS protection reveals the presence of x64dbg.
  ☆23Updated 8 years ago
• IcEy-999 / PDB-Frame
  对debughelp的二次开发
  ☆11Updated 2 years ago
• zhuhuibeishadiao / DriverMaper
  map driver to memory
  ☆25Updated 6 years ago
• BeneficialCode / WmipCodeSamples
  What makes it page
  ☆17Updated 2 years ago
• AzureGreen / ArkToolDrv
  An ark tool's driver
  ☆40Updated 7 years ago
• kysam / NhoVirtualizer
  A simple native code virtualizer for 32-bit Windows PE
  ☆15Updated 9 years ago
• AzureGreen / VAToPA
  a demo for x86/x64's paging memory management learning, convert a virtual address from ring3 to physical address in ring0
  ☆17Updated 7 years ago
• damotou / inlinehook
  windows inlinehook R3 R0
  ☆11Updated 6 years ago
• DeviceObject / ShitDrv
  ☆12Updated 8 months ago
• DeviceObject / InjectDrv
  Kernel Inject Process
  ☆11Updated 7 years ago
• deroko / xtracer
  old code from 2007/2008 which uses split TLB to trace OEP
  ☆16Updated 6 years ago
• zer0mem / VadScanner
  PoC of BOOST-ed _EPROCESS.VadRoot iterating
  ☆25Updated 10 years ago
• SHA-MRIZ / FsMinfilterHooking
  ☆31Updated 4 years ago