FaEryICE/MemScanner external links

---

GitHub - View repository

GitHub.dev - Open in online code editor

Star history - Growth chart over time

deps.dev - Dependencies and security vulnerabilities

Gitingest - Export source code for LLM usage

Repomix - Export source code for LLM usage

uithub - Export source code for LLM usage

Close

FaEryICE/MemScanner

Readme badge preview -

If you own this repo, copy the snippet below and add it to your README.md

---

Copy

[![RelatedRepos](https://img.shields.io/badge/related-repos-yellow)](https://relatedrepos.com/gh/FaEryICE/MemScanner)

Close

FaEryICE / MemScannerView on GitHubMore

• External links
• Readme badge

Analyze Windows x64 Kernel Memory Layout

☆129Nov 19, 2020Updated 5 years ago

Alternatives and similar repositories for MemScanner

Users that are interested in MemScanner are comparing it to the libraries listed below

• fIappy / infhook19041

  View on GitHub
  ☆125May 23, 2020Updated 5 years ago
• zouxianyu / KernelHiddenExecute

  View on GitHub
  Hide codes/data in the kernel address space.
  ☆188May 8, 2021Updated 4 years ago
• DragonQuestHero / DwmDraw

  View on GitHub
  不使用3环挂钩进行DWM桌面绘制
  ☆82Dec 9, 2021Updated 4 years ago
• cs1ime / DICHook

  View on GitHub
  Hook NtDeviceIoControlFile with PatchGuard
  ☆107May 10, 2022Updated 3 years ago
• amiryeshurun / HyperWin

  View on GitHub
  A native hypervisor designed for the Windows operating system
  ☆125Mar 6, 2021Updated 4 years ago
• zzhouhe / PG1903

  View on GitHub
  ☆116Oct 1, 2019Updated 6 years ago
• xinnie-the-pooh / MS

  View on GitHub
  巨硬
  ☆17Oct 4, 2023Updated 2 years ago
• zhuhuibeishadiao / PatchGuardResearch

  View on GitHub
  win10 pgContext dynamic dump (btc version)
  ☆110Jan 15, 2020Updated 6 years ago
• yjugl / mitimon

  View on GitHub
  Monitor ETW events for Windows process mitigation policies, with stack traces
  ☆31Oct 7, 2022Updated 3 years ago
• zouxianyu / PhysicalMemoryRW

  View on GitHub
  the basic version of the ring0 physical memory read/write tool
  ☆92Aug 18, 2019Updated 6 years ago
• Air14 / KDBGDecryptor

  View on GitHub
  A simple example how to decrypt kernel debugger data block
  ☆32Feb 8, 2021Updated 5 years ago
• stonedreamforest / Navy_public

  View on GitHub
  轻量级自动分析病毒程序调用上下文、游戏反调试实现技术平台
  ☆100Jun 21, 2020Updated 5 years ago
• KelvinMsft / DeviceMon

  View on GitHub
  VT-based PCI device monitor (SPI)
  ☆158Oct 29, 2020Updated 5 years ago
• 0xcpu / ExecutiveCallbackObjects

  View on GitHub
  Research on Windows Kernel Executive Callback Objects
  ☆315Feb 22, 2020Updated 6 years ago
• Vicshann / GInjer

  View on GitHub
  Global DLL injector
  ☆71May 16, 2021Updated 4 years ago
• maxkray13 / Cvc

  View on GitHub
  Communication via callback
  ☆73Oct 9, 2019Updated 6 years ago
• dearfuture / oldv-driver

  View on GitHub
  ☆14Mar 8, 2019Updated 6 years ago
• codetronik / KernelV

  View on GitHub
  Rootkit & Anti-rootkit
  ☆42Jan 27, 2024Updated 2 years ago
• IcEy-999 / PDB-Frame

  View on GitHub
  对debughelp的二次开发
  ☆11Feb 20, 2023Updated 3 years ago
• kkent030315 / kernel_callbacks

  View on GitHub
  Bypasses for Windows kernel callbacks PatchGuard protection
  ☆44Aug 15, 2021Updated 4 years ago
• DownWithUp / ALPC-Example

  View on GitHub
  An example of a client and server using Windows' ALPC functions to send and receive data.
  ☆115Jan 21, 2025Updated last year
• bb107 / ServiceCall

  View on GitHub
  Interprocess communication library, providing the ability to call functions from each other
  ☆20Oct 3, 2019Updated 6 years ago
• Aki2k / BEDaisy

  View on GitHub
  reverse engineering of bedaisy.sys (battleyes kernel driver) - Aki2k/BEDaisy
  ☆116Aug 10, 2020Updated 5 years ago
• kouzhudong / libdrv

  View on GitHub
  Static Library For Windows Drivers
  ☆41Dec 13, 2025Updated 2 months ago
• HoShiMin / formatPE

  View on GitHub
  A bunch of parsers for PE and PDB formats in C++
  ☆267May 15, 2024Updated last year
• 0xhido / BlueLight

  View on GitHub
  Open-source EDR kernel-component for system monitoring and DLL injection
  ☆33Nov 14, 2020Updated 5 years ago
• 1401199262 / Hook-KdTrap

  View on GitHub
  ☆223Mar 11, 2023Updated 2 years ago
• zhuhuibeishadiao / NewHideDriverEx

  View on GitHub
  Hide Driver By MiProcessLoaderEntry
  ☆294May 17, 2019Updated 6 years ago
• KelvinMsft / UsbMon

  View on GitHub
  ☆39Oct 29, 2020Updated 5 years ago
• tcpie / hook_any_x64

  View on GitHub
  Easily hook WIN32 x64 functions
  ☆18Feb 19, 2025Updated last year
• avakar / vcrtl

  View on GitHub
  C++ Exceptions in Windows Drivers
  ☆221Dec 21, 2020Updated 5 years ago
• bb107 / RtlWow64

  View on GitHub
  c++ implementation of windows heavens gate
  ☆70Feb 12, 2021Updated 5 years ago
• yardenshafir / SymlinkCallback

  View on GitHub
  A driver that hooks C: volume using symbolic link callback to track all FS access to the volume
  ☆110Apr 24, 2020Updated 5 years ago
• OkazakiNagisa / VTbasedDebuggerWin7

  View on GitHub
  by others
  ☆40Jan 28, 2018Updated 8 years ago
• killvxk / DisableWin10PatchguardPoc

  View on GitHub
  pseudo-code to show how to disable patchguard with win10
  ☆294Jan 13, 2018Updated 8 years ago
• SDXT / MMInject

  View on GitHub
  Kernel DLL Injector using NX Bit Swapping and VAD hide for hiding injected DLL
  ☆219Nov 12, 2020Updated 5 years ago
• zhuhuibeishadiao / JunkDriveOpenSource

  View on GitHub
  Some garbage drivers written for getting started
  ☆65Dec 31, 2019Updated 6 years ago
• Zero-Tang / SimpleWhpDemo

  View on GitHub
  Simple Demo of using Windows Hypervisor Platform
  ☆29Jul 14, 2025Updated 7 months ago
• 9176324 / Daat

  View on GitHub
  a simple intel vt code both support x86 & x64. PatchGuard monitor.
  ☆77Oct 28, 2021Updated 4 years ago