Alternatives and similar repositories for afd

Users that are interested in afd are comparing it to the libraries listed below

• tandasat / ia32-doc
  IA32-doc is a project which aims to put as many definitions from the Intel Manual into machine-processable format as possible
  ☆16Updated 3 years ago
• CZashi / win-reverse
  ntos shit
  ☆25Updated last year
• KelvinMsft / UsbMon
  ☆35Updated 4 years ago
• dearfuture / oldv-driver
  ☆14Updated 6 years ago
• zer0mem / VadScanner
  PoC of BOOST-ed _EPROCESS.VadRoot iterating
  ☆25Updated 11 years ago
• kouzhudong / libdrv
  Static Library For Windows Drivers
  ☆33Updated 3 months ago
• kyREcon / IsKernelDebuggerPresent
  Detects if a Kernel mode debugger is active by reading the value of KUSER_SHARED_DATA.KdDebuggerEnabled. It is a high level and portable …
  ☆23Updated 7 years ago
• chuangshizhiqiang / WindowsComponentsSUM
  A collection of Windows Components(Mostly is ntoskrnl.exe)
  ☆28Updated 4 years ago
• MiroKaku / ConMon
  Windows Console Monitor
  ☆34Updated 5 years ago
• wjcsharp / Common
  Shareds for kernel developement
  ☆28Updated 11 years ago
• MiroKaku / Learning-Example
  For Example. See Miro's Blog
  ☆30Updated 2 years ago
• lldre / handle_exploration
  Figuring out the cause of a handle downgrade
  ☆24Updated 2 years ago
• yjugl / mitimon
  Monitor ETW events for Windows process mitigation policies, with stack traces
  ☆31Updated 2 years ago
• gerronjo / openlibs
  Open Source Libraries Collection
  ☆24Updated 9 years ago
• NewWorldComingSoon / OAC
  Open Anti Cheat
  ☆27Updated 2 years ago
• 9176324 / Daat
  a simple intel vt code both support x86 & x64. PatchGuard monitor.
  ☆75Updated 3 years ago
• anzelesnik / MySyscall
  Example of hijacking system calls via function pointer tables
  ☆31Updated 3 years ago
• Speedi13 / NsiAllocateAndGetTable-used-from-GetTcpTableInternal
  Undocumented NsiAllocateAndGetTable usage in GetTcpTableInternal reverse engineered on Win7 X64
  ☆20Updated 7 years ago
• RIscRIpt / ntl
  Very tiny and selective implementation of STL for Windows NT kernel mode drivers
  ☆18Updated 3 years ago
• Air14 / KDBGDecryptor
  A simple example how to decrypt kernel debugger data block
  ☆29Updated 4 years ago
• ajkhoury / Windbg2Struct
  Takes a Windbg dumped structure (using the 'dt' command) and formats it into a C structure
  ☆35Updated 10 months ago
• Shhoya / Shh0yaKernelHook
  Shh0ya Kernel Hook Driver
  ☆22Updated 4 years ago
• IcEy-999 / PDB-Frame
  对debughelp的二次开发
  ☆11Updated 2 years ago
• anatolymik / machineries
  ☆9Updated 8 years ago
• h4xu3lyn / FuckPg
  Analysing and defeating PatchGuard universally
  ☆35Updated 4 years ago
• Barakat / windows.sandbox
  Windows sandbox PoC
  ☆31Updated 5 years ago
• amiryeshurun / HyperWin-Communication-Driver
  A driver that supports communication between a Windows guest and HyperWin
  ☆15Updated 4 years ago
• he4rtbleed / PPLL
  Protected Process Light Library
  ☆18Updated 4 years ago
• DOGSHITD / IDTHook_X64
  Hook IDT vector 0xb2 to detect SCI in 64bit windows.
  ☆34Updated 2 years ago
• ntoskrnl7 / ldk
  Load Dll into Kernel space
  ☆38Updated 2 years ago