Toolkits for KPH (KSystemInformer) Dynamic Data .
☆34Oct 10, 2026Updated last week
Alternatives and similar repositories for kphtools
Users that are interested in kphtools are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Windows Kernel Security: Memory Integrity Verification with Disk Verification of ntoskrnl.exe☆28Mar 23, 2025Updated last year
- WinDbg-Samples ExdiGdbSrv fork 修复了一部分Vmware调试的问题☆34Jul 10, 2023Updated 3 years ago
- Minimalistic HTTP(S) client for the NT kernel☆61Dec 1, 2025Updated 10 months ago
- pg bypass for win10-win11 (learn from NP)☆17Oct 28, 2025Updated 11 months ago
- 针对windows rootkit的一些检测，分别从进程、端口、文件这三个方面进行检测。☆21Jan 16, 2025Updated last year
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- Use ci.dll API for validating Authenticode signature of files☆12Mar 28, 2022Updated 4 years ago
- Stream your Windows system audio over LAN to any device directly through a browser, connected on the same network. No apps. No drivers. P…☆16Nov 6, 2025Updated 11 months ago
- A WinDbg plugin that turns the current debugging session into an MCP server for command docs, debugger actions, and AI-assisted analysis.☆57Aug 9, 2026Updated 2 months ago
- Undetected Easy (UDE) is a detection scanner for finding detections before they catch you, using reversed routines from EasyAntiCheat, Ba…☆49Jun 26, 2026Updated 3 months ago
- Windows kernel-mode reboot-restore driver — NTFS volume filter with copy-on-write redirection☆67Jun 11, 2026Updated 4 months ago
- A basic 100 loc CPU emulator using the existing code of ntoskrnl.exe☆74Aug 16, 2023Updated 3 years ago
- 无痕hook探测☆50Aug 6, 2025Updated last year
- ☆26Jul 15, 2023Updated 3 years ago
- DWM hooking-based screenshot tool☆39Sep 13, 2025Updated last year
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- ☆53Aug 26, 2026Updated last month
- Hook syscalls from ring0 without triggering PatchGuard☆33Oct 29, 2025Updated 11 months ago
- Using NtCreateFile and NtDeviceIoControlFile to realize the function of winsock（利用NtCreateFile和NtDeviceIoControlFile 实现winsock的功能）☆128Sep 9, 2022Updated 4 years ago
- map and lift the VM handlers so you can read them in IDA/Ghidra made for vmp 3.8-3.10☆54Aug 28, 2026Updated last month
- 使用 Intel 虚拟化特性实现应用层HOOK☆66Sep 11, 2025Updated last year
- A series of methods used to detect kernel shellcode for tencent game safe race 2024☆47Apr 22, 2024Updated 2 years ago
- cr3 shuffle driver☆100Mar 24, 2024Updated 2 years ago
- Anti-Rootkit & System kernel management tool☆85Jun 30, 2026Updated 3 months ago
- The AI-friendly binary analysis & decompilation engine — 1:1 lift, built on LLVM [WIP]☆97Updated this week
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- ☆108Feb 6, 2026Updated 8 months ago
- windows defender reading lsass☆15Feb 13, 2026Updated 8 months ago
- 一个windows内核驱动分析框架，对内核所有导出函数进行挂钩监控☆78Nov 19, 2025Updated 11 months ago
- Kernel dwm render☆177Oct 10, 2023Updated 3 years ago
- Various techniques used to bypass SMEP in the Windows Kernel.☆20Apr 20, 2025Updated last year
- Automatic vtable detection, inheritance analysis, and function override tracking for reverse engineering compiled C++ binaries. Supports …☆149Mar 13, 2026Updated 7 months ago
- ☆14Apr 12, 2024Updated 2 years ago
- Shows an example of how to implement VT-d/AMD-Vi on Windows☆188Sep 22, 2023Updated 3 years ago
- A cross-platform rust no-std library for verifying and extracting signature information from PE files.☆76Dec 2, 2024Updated last year
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Windows kernel driver demonstrating kernel-to-usermode communication via shared memory sections☆123Apr 24, 2026Updated 5 months ago
- Lightweight, dependency-free x86-64 CPU emulation library with Unicorn-like guest mode and direct host-memory execution.☆239May 11, 2026Updated 5 months ago
- MCP for ReClass.NET☆25Dec 31, 2025Updated 9 months ago
- Type-2 Intel x86-64 hypervisor for Windows focused on tracing control-flow transitions out of obfuscated or virtualized kernel drivers at…☆38Apr 18, 2026Updated 6 months ago
- 一款linux下的安全产品目的是满足个人安全需求有SSH爆破防护和SYN攻击扫描防护功能,基于netfilter,☆23Dec 2, 2023Updated 2 years ago
- The Kernel-Mode Winsock library, supporting TCP, UDP and Unix sockets (DGRAM and STREAM).☆297Sep 19, 2026Updated last month
- Windows kernel driver that detects hypervisors by probing SIDT/LIDT edge cases, paging/TLB behaviors, privilege transitions, and timing e…☆50Mar 3, 2026Updated 7 months ago