Alternatives and similar repositories for Nemesis

Users that are interested in Nemesis are comparing it to the libraries listed below

• backengineering / vmhook
  A demonstration of hooking into the VMProtect-2 virtual machine
  ☆23Updated 2 years ago
• iqrw0 / DieDMAProtection
  ☆29Updated last year
• Peribunt / VPGATHER
  Using the peculiar behaviour of the VPGATHER instructions to determine if an address will fault before it is truly accessed. All done in …
  ☆52Updated last month
• asteria121 / HalPrivateDispatchTableHook
  Hook syscalls from ring0 without triggering PatchGuard
  ☆22Updated 3 months ago
• 1401199262 / HookHvcallCodeVa
  ☆23Updated 2 years ago
• xu-Wan / HypercallPageHook
  POC Hook of nt!HvcallCodeVa
  ☆54Updated 2 years ago
• Peribunt / CTC
  Interprocess communication via a covert timing channel
  ☆26Updated 3 months ago
• RIscRIpt / wdmcpp
  Visual Studio Project example for using Microsoft's STL in WDM (Windows Kernel-mode Driver)
  ☆25Updated 4 years ago
• stdhu / windows-kernel-pagehook
  windows kernel pagehook
  ☆41Updated 3 years ago
• NeoMaster831 / rwDriver
  Executes Read/Write process memory with `NtQueryCompositionSurfaceStatistics`
  ☆22Updated last year
• 1401199262 / HookSwapContext
  ☆34Updated 2 years ago
• boom-cr3 / NotifyRoutineHijackThread
  Hijack NotifyRoutine for a kernelmode thread
  ☆41Updated 3 years ago
• Peribunt / Exception-Ret-Spoofing
  A simple way to spoof return addresses using an exception handler
  ☆43Updated 3 years ago
• Oliver-1-1 / EtwKeyboardDetection
  ☆37Updated last year
• cutecatsandvirtualmachines / DDMA
  Disk based DMA for ATA and SCSI
  ☆41Updated 2 years ago
• emlinhax / tableflipper
  partially disable patchguard up to win11 21H2
  ☆19Updated last year
• brew02 / BudgetEPT
  Create stealthy, inline, EPT-like hooks using SMAP and SMEP
  ☆60Updated last year
• ByteWhite1x1 / DriverBase
  A simple C++ driver base with KD data block
  ☆11Updated 3 years ago
• 0x1c1101 / zombie_asm
  C++ Assembler with Built-in Mutation Engine
  ☆30Updated 5 months ago
• gmh5225 / warbird-example
  ☆24Updated 2 years ago
• Nitr0-G / SVM-Hypervisor
  This is a ring -1 header framework in order to simplify the creation of hypervisors on SVM
  ☆27Updated 2 years ago
• Midi12 / whse
  WinHvShellcodeEmulator (WHSE) is a shellcode emulator leveraging the Windows Hypervisor Platform API
  ☆26Updated 3 years ago
• POPFD / HypervisorBase
  A library for intel VT-x hypervisor functionality supporting EPT shadowing.
  ☆51Updated 4 years ago
• gmh5225 / FakeEnclave
  A poc that abuses Enclave
  ☆40Updated 3 years ago
• hugsy / shared-kernel-user-section-driver
  Experiment to use sections as User/Kernelmode comm vector
  ☆22Updated 2 years ago
• kkent030315 / CiGetCertPublisherName
  An example code of CiGetCertPublisherName
  ☆17Updated 3 years ago
• stuxnet147 / luna-1
  ☆17Updated 5 years ago
• lennyRBLX / ret_addr_spoofer
  Compileable POC of namazso's x64 return address spoofer.
  ☆50Updated 5 years ago
• ByteWhite1x1 / PatchGuardResearch
  Bypassing kernel patch protection runtime
  ☆21Updated 2 years ago
• HookR0 / AcDrv
  anti cheat drv open source
  ☆19Updated last year