Alternatives and similar repositories for Rw-No-Attach:

Users that are interested in Rw-No-Attach are comparing it to the libraries listed below

• KANKOSHEV / Detect-KeAttachProcess
  Detect-KeAttachProcess by iterating through all processes as well as checking the context of the thread.
  ☆109Updated 3 years ago
• weak1337 / SkipHook
  ☆120Updated 2 years ago
• estimated1337 / lenovo_mapper
  driver manual mapper powered by https://github.com/estimated1337/lenovo_exec
  ☆109Updated 2 years ago
• KameronHawk / Kernel-VAD-Injector
  Windows 10 DLL Injector via Driver utilizing VAD and hiding the loaded driver
  ☆164Updated last year
• MmMapIoSpace / UCMapper
  Unknowncheats Magically Optimized Tidy Mapper using nvaudio
  ☆116Updated 8 months ago
• zer0condition / GDRVLib
  Virtual and physical memory hacking library using gigabyte vulnerable driver
  ☆70Updated last year
• ekknod / acdrv
  base for testing
  ☆159Updated 4 months ago
• Deputation / hygieia
  Hygieia, a vulnerable driver traces scanner written in C++ as an x64 Windows kernel driver.
  ☆139Updated 3 years ago
• Rogue619Z / Manual-Map-Injector
  I've developed a rather effective driver for DLL injection targeting EAC Protected Games, and since I'm not aware of any notable games ut…
  ☆88Updated 9 months ago
• J0xna / Kernel-Overlay-Hider
  ☆136Updated last year
• i32-Sudo / 64KernelDriverCleaner
  A Kernel Driver that can be used for a cheat or malware base to circumvent common cache & structure table checks. PsLoadedModuleList howe…
  ☆94Updated 5 months ago
• kkent030315 / anymapper
  x64 Windows kernel driver mapper, inject unsigned driver using anycall
  ☆136Updated last year
• cutecatsandvirtualmachines / SKLib
  Standard Kernel Library for Windows hacking in C++
  ☆129Updated 2 months ago
• oakboat / RTCore64_Vulnerability
  Use RTCore64 to map your driver on windows 11.
  ☆98Updated 10 months ago
• 0mWindyBug / GhostMapperUM
  manual map unsigned driver over signed memory
  ☆185Updated 10 months ago
• fengjixuchui / SharedMemory-By-Frankoo
  Kernel driver that uses Shared memory to communicate with UserMode
  ☆85Updated 5 years ago
• cheatdeveloper73 / modded-voyager
  bypass to the p2c(s) that I have run over the past few months.
  ☆51Updated 2 years ago
• VollRagm / ShellcodeBakery
  A simple tool to assemble shellcode ready to be copy-pasted into code
  ☆67Updated 2 years ago
• Oliver-1-1 / ModuleSpoof
  ☆73Updated 9 months ago
• i32-Sudo / PdFwKrnlMapper
  An Unsigned Driver Mapper for Windows 10 22H2 -> Windows 11 23H2 that uses PdFwKrnl to exploit the Read/Write IOCTL Calls to disable DSE …
  ☆130Updated 5 months ago
• ekknod / sumap
  manually map driver for a signed driver memory space
  ☆147Updated 3 years ago
• efidemon69 / kdmapper-dumper
  KDM Is a driver that will dumps every drivers that got manually mapped with kdmapper.
  ☆53Updated 2 years ago
• ekknod / MouseClassServiceCallbackTrick
  ☆50Updated 2 years ago
• SamuelTulach / voidmap
  Using CVE-2021-40449 to manual map kernel mode driver
  ☆100Updated 2 years ago
• ekknod / MouseClassServiceCallbackMeme
  Calling "own" MouseClassServiceCallback
  ☆64Updated 2 years ago
• kprprivate / EAC-CR3-BYPASS
  A simple UM + KM example of how to bypass EAC CR3
  ☆108Updated last month
• SamuelTulach / DirectPageManipulation
  A basic demonstration of directly overwriting paging structures for physical memory r/w and interprocess memory copy
  ☆82Updated last year
• UCFoxi / VTableKFunctionHook
  This project will give you an example how you can hook a kernel vtable function that cannot be directly called
  ☆83Updated 3 years ago
• Th3Spl / IoCreateDriver
  IoCreateDriver Implementation, it can be handful if you're trying to bypass anticheats
  ☆68Updated 9 months ago
• SamuelTulach / meme-rw
  Archive R/W into any protected process by changing the value of KTHREAD->PreviousMode
  ☆152Updated 2 years ago