Kernel Detective
☆155May 24, 2026Updated 5 months ago
Alternatives and similar repositories for kerneldetective
Users that are interested in kerneldetective are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Advanced driver monitoring utility.☆220Jul 8, 2026Updated 3 months ago
- win10 pgContext dynamic dump (btc version)☆113Jan 15, 2020Updated 6 years ago
- ☆19Jul 20, 2015Updated 11 years ago
- Demo to show how write ALPC Client & Server using native Ntdll.dll syscalls.☆21Jan 25, 2022Updated 4 years ago
- Different ways to get the HDD Serial☆39Apr 7, 2018Updated 8 years ago
- Bare Metal GPUs on DigitalOcean Gradient AI • AdPurpose-built for serious AI teams training foundational models, running large-scale inference, and pushing the boundaries of what's possible.
- My repository to upload drivers from different books and all the information related to windows internals.☆171Aug 16, 2019Updated 7 years ago
- HAXM hypervisor client☆18Nov 30, 2018Updated 7 years ago
- Injectable Windows DLL which enforces a W^X memory policy on a process☆15Mar 10, 2017Updated 9 years ago
- ☆14Mar 8, 2019Updated 7 years ago
- ☆14Jul 28, 2018Updated 8 years ago
- Driver demonstrating how to register a DPC to asynchronously wait on an object☆50Jan 15, 2021Updated 5 years ago
- Map memory to user space and manipulate user memory, using capmon☆24Nov 3, 2018Updated 8 years ago
- Driver and WinDBG scripts to dump information about all resources and lookaside lists☆67Apr 4, 2020Updated 6 years ago
- DirectNtApi - simple method to make ntapi function call without importing or walking export table. Work under Windows 7, 8 and 10☆53Mar 12, 2024Updated 2 years ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- Detects if a Kernel mode debugger is active by reading the value of KUSER_SHARED_DATA.KdDebuggerEnabled. It is a high level and portable …☆25Sep 18, 2017Updated 9 years ago
- Detecting execution of kernel memory where is not backed by any image file☆263Jul 11, 2018Updated 8 years ago
- 一些研究☆14Dec 18, 2019Updated 6 years ago
- A hypervisor hiding user-mode memory using EPT☆108Jan 28, 2018Updated 8 years ago
- Hypervisor based tool for monitoring system register accesses.☆155Sep 13, 2018Updated 8 years ago
- A sample on how to inject a DLL from a kernel driver☆61Sep 13, 2016Updated 10 years ago
- Examples of leaking Kernel Mode information from User Mode on Windows☆646Jul 7, 2017Updated 9 years ago
- Шаблон полнофункционального драйвера и обёртки над ядерным API☆110Aug 28, 2016Updated 10 years ago
- Open Source Libraries Collection☆26Jan 1, 2016Updated 10 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Not mine, just saved☆13Nov 12, 2023Updated 2 years ago
- Hooking SSDT with Avast Internet Security Hypervisor☆114Apr 6, 2019Updated 7 years ago
- Turn off PatchGuard in real time for win7 (7600) ~ later☆1,049Apr 21, 2022Updated 4 years ago
- Some research on AltSystemCallHandlers functionality in Windows 10 20H1 18999☆245Nov 6, 2019Updated 7 years ago
- This is the first software system, which can detect a stealthy hypervisor and calculate several nested ones even under countermeasures.☆92Sep 22, 2026Updated last month
- PatchGuard Research☆305Oct 6, 2018Updated 8 years ago
- Remote memory library in C++17.☆32May 31, 2018Updated 8 years ago
- Windows_OS_Internals_Curriculum_Resource_Kit-ACADEMIC☆29Nov 17, 2018Updated 7 years ago
- x64 Windows implementation of virtual-address to physical-address translation☆54Jun 3, 2021Updated 5 years ago
- Deploy open-source AI quickly and easily - Special Bonus Offer • AdRunpod Hub is built for open source. One-click deployment and autoscaling endpoints without provisioning your own infrastructure.
- A driver that hooks C: volume using symbolic link callback to track all FS access to the volume☆108Apr 24, 2020Updated 6 years ago
- Exploiting HEVD's WriteWhatWhereIoctlDispatch for LPE on Windows 10 TH2 through RS3 using GDI objects.☆24Jan 23, 2018Updated 8 years ago
- kernel-mode TDI client which can send and receive HTTP requests☆56Jun 9, 2018Updated 8 years ago
- Easily hook WIN32 x64 functions☆18Feb 19, 2025Updated last year
- Analyze PatchGuard☆56Aug 19, 2018Updated 8 years ago
- ☆73Dec 17, 2020Updated 5 years ago
- 驱动层拦截web访问源码☆29Apr 2, 2018Updated 8 years ago