DownWithUp/WinPools external links

---

GitHub - View repository

GitHub.dev - Open in online code editor

Star history - Growth chart over time

deps.dev - Dependencies and security vulnerabilities

Gitingest - Export source code for LLM usage

Repomix - Export source code for LLM usage

uithub - Export source code for LLM usage

Close

DownWithUp/WinPools

Readme badge preview -

If you own this repo, copy the snippet below and add it to your README.md

---

Copy

[![RelatedRepos](https://img.shields.io/badge/related-repos-yellow)](https://relatedrepos.com/gh/DownWithUp/WinPools)

Close

DownWithUp / WinPoolsView on GitHubMore

• External links
• Readme badge

WinPools is an example of how Windows kernel big pool addresses can be leaking using NtQuerySystemInformation

☆15Jun 23, 2019Updated 6 years ago

Alternatives and similar repositories for WinPools

Users that are interested in WinPools are comparing it to the libraries listed below

• Dy-Baby / PageTableHook

  View on GitHub
  ☆17Dec 18, 2022Updated 3 years ago
• 9176324 / MiniSDK

  View on GitHub
  MiniSDK
  ☆10Nov 8, 2021Updated 4 years ago
• namazso / SaferIO

  View on GitHub
  A slightly safer io access library
  ☆14Sep 20, 2021Updated 4 years ago
• TaoistBrickscarrier / WFPKit

  View on GitHub
  粗暴地枚举管理内核的WFP对象。 Manage kernel WFPs in a brutal way.
  ☆27Jan 14, 2018Updated 8 years ago
• AK6DN / obj2bin

  View on GitHub
  DEC PDP-11 object file translator / linker
  ☆13Sep 13, 2025Updated 6 months ago
• HackOvert / LazyBloodhound

  View on GitHub
  Lazy Bloodhound is a toy PHP static code analyzer built on tree-sitter
  ☆13Feb 19, 2021Updated 5 years ago
• conand / Joker

  View on GitHub
  Windows Minifilter driver that redirects any I/O Request of mp3 files to a target file
  ☆18Jul 7, 2015Updated 10 years ago
• Lixinist / Mutation

  View on GitHub
  ☆15Mar 4, 2021Updated 5 years ago
• Rat431 / ColdKernel_KUSER

  View on GitHub
  A simple kernel mode driver that hooks some values at the KUSER_SHARED_DATA structure.
  ☆27Jan 7, 2020Updated 6 years ago
• wqreytuk / secureCRT_ALL_VERSION_DECRYPTOR

  View on GitHub
  ☆17Aug 5, 2023Updated 2 years ago
• smallzhong / NeacController

  View on GitHub
  Exploit vulnerabilities in NeacSafe64.sys to achieve privilege escalation and kernel-mode shellcode execution
  ☆21Apr 2, 2025Updated 11 months ago
• quanzhuo / DuiDesigner

  View on GitHub
  DuiDesigner, build on windows10 with vs2017
  ☆14Jan 20, 2025Updated last year
• P4nda0s / qwb_vmnote_recompiler

  View on GitHub
  一个将 vmnote 指令集重编译成 x64 指令集的脚本，并且可以用 IDA 进行分析。
  ☆17Jul 12, 2021Updated 4 years ago
• saereya / nightshade

  View on GitHub
  Nightshade is a Windows Memory Manipluation library specifically for injecting DLLs and Game Hacking
  ☆13Dec 12, 2022Updated 3 years ago
• HookR0 / AcDrv

  View on GitHub
  anti cheat drv open source
  ☆19Apr 18, 2024Updated last year
• 0mdi / edgegdi_hook

  View on GitHub
  ☆15Feb 5, 2021Updated 5 years ago
• lyyyuna / anotherDebugger

  View on GitHub
  动手打造一个 Windows 下的 C 语言调试器
  ☆19Mar 26, 2017Updated 8 years ago
• FlagHacks / Splitgate-Internal

  View on GitHub
  ☆10Jul 4, 2023Updated 2 years ago
• vardyh / libcodecs

  View on GitHub
  libcodecs is part of the "Huorong eXtendible Stream Scan Engine" project copyright by Huorong Borui (Beijing) Technology Co., Ltd.
  ☆24Aug 17, 2015Updated 10 years ago
• LLLZed / IDTHOOK

  View on GitHub
  IDT HOOK KiPageFault test Modified from： github.com/kanren3/x64-IDT-HOOK
  ☆18May 2, 2020Updated 5 years ago
• mmozeiko / symget

  View on GitHub
  fast pdb debug symbol downloader
  ☆24Aug 9, 2025Updated 7 months ago
• rogxo / search

  View on GitHub
  A series of methods used to detect kernel shellcode for tencent game safe race 2024
  ☆45Apr 22, 2024Updated last year
• alal4465 / Practical-Reverse-Engineering-Solutions

  View on GitHub
  Some drivers I've written while solving exercises from Practical Reverse Engineering
  ☆15Jan 9, 2022Updated 4 years ago
• Alex3434 / GetHDDSerial

  View on GitHub
  Different ways to get the HDD Serial
  ☆39Apr 7, 2018Updated 7 years ago
• tandasat / capstone

  View on GitHub
  Capstone disassembly/disassembler framework: Core (Arm, Arm64, M68K, Mips, PPC, Sparc, SystemZ, X86, X86_64, XCore) + bindings (Python, J…
  ☆15May 18, 2019Updated 6 years ago
• kotae4 / ntkernel-dev-notes

  View on GitHub
  ☆24May 26, 2021Updated 4 years ago
• zer0mem / VadScanner

  View on GitHub
  PoC of BOOST-ed _EPROCESS.VadRoot iterating
  ☆27May 21, 2014Updated 11 years ago
• Cr4sh / PTBypass-PoC

  View on GitHub
  Bypassing code hooks detection in modern anti-rootkits via building faked PTE entries.
  ☆79Jan 24, 2011Updated 15 years ago
• neilzhy / gtest-report-prettify

  View on GitHub
  Creates a HTML page from a Google Test JSON or XML report.
  ☆16Jun 12, 2019Updated 6 years ago
• SamuelTulach / SaberHighlight

  View on GitHub
  Beat Saber mod enabling NVIDIA Highlights functionality
  ☆23Jan 5, 2022Updated 4 years ago
• MalwareMechanic / RISCYpacker

  View on GitHub
  Process Hollowing Packer
  ☆29Sep 5, 2017Updated 8 years ago
• zhuyue1314 / stoned-UEFI-bootkit

  View on GitHub
  ☆27Nov 4, 2015Updated 10 years ago
• killvxk / CodeStudy

  View on GitHub
  逆的或者收集的别人家的代码
  ☆29Feb 6, 2025Updated last year
• ReFo0 / farlight84-cheat

  View on GitHub
  farlight84 cheat
  ☆17Nov 29, 2023Updated 2 years ago
• OMRI-FRX / check_EPT_hook

  View on GitHub
  无痕hook探测
  ☆45Aug 6, 2025Updated 7 months ago
• wongfei / wda_monitor_trick

  View on GitHub
  PoC: make WDA_MONITOR window transparent on screenshot/capture
  ☆101Feb 5, 2020Updated 6 years ago
• SLAUC91 / DLLHiding

  View on GitHub
  Hiding x32/x64 Modules/DLLs using PEB
  ☆62Jun 11, 2015Updated 10 years ago
• zodiacon / ndcoslo2019

  View on GitHub
  NDC Oslo 2019 slides and demos
  ☆33Nov 26, 2020Updated 5 years ago
• SaltedFishBayonet / Windows-Kernel-Crypto

  View on GitHub
  Windows kernel driver encryption library, support base64, aes-256, rsa-2048 and higher, ecc-256, single file, minimal dependence, support…
  ☆22May 20, 2021Updated 4 years ago