Toolkits for KPH (KSystemInformer) Dynamic Data .
☆35Oct 10, 2026Updated last month
Alternatives and similar repositories for kphtools
Users that are interested in kphtools are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Windows Kernel Security: Memory Integrity Verification with Disk Verification of ntoskrnl.exe☆28Mar 23, 2025Updated last year
- WinDbg-Samples ExdiGdbSrv fork 修复了一部分Vmware调试的问题☆34Jul 10, 2023Updated 3 years ago
- Minimalistic HTTP(S) client for the NT kernel☆61Dec 1, 2025Updated 11 months ago
- pg bypass for win10-win11 (learn from NP)☆17Oct 28, 2025Updated last year
- 针对windows rootkit的一些检测，分别从进程、端口、文件这三个方面进行检测。☆21Jan 16, 2025Updated last year
- Simple, predictable pricing with DigitalOcean hosting • AdAlways know what you'll pay with monthly caps and flat pricing. Enterprise-grade infrastructure trusted by 600k+ customers.
- Use ci.dll API for validating Authenticode signature of files☆12Mar 28, 2022Updated 4 years ago
- A WinDbg plugin that turns the current debugging session into an MCP server for command docs, debugger actions, and AI-assisted analysis.☆58Aug 9, 2026Updated 3 months ago
- ☆54Aug 26, 2026Updated 2 months ago
- Stream your Windows system audio over LAN to any device directly through a browser, connected on the same network. No apps. No drivers. P…☆16Nov 6, 2025Updated last year
- Shows an example of how to implement VT-d/AMD-Vi on Windows☆190Sep 22, 2023Updated 3 years ago
- anti cheat drv open source☆20Apr 18, 2024Updated 2 years ago
- ntos shit☆35Feb 15, 2024Updated 2 years ago
- Automatic vtable detection, inheritance analysis, and function override tracking for reverse engineering compiled C++ binaries. Supports …☆152Mar 13, 2026Updated 8 months ago
- 无痕hook探测☆50Aug 6, 2025Updated last year
- Bare Metal GPUs on DigitalOcean Gradient AI • AdPurpose-built for serious AI teams training foundational models, running large-scale inference, and pushing the boundaries of what's possible.
- A cross-platform rust no-std library for verifying and extracting signature information from PE files.☆76Dec 2, 2024Updated last year
- ☆26Jul 15, 2023Updated 3 years ago
- Hook syscalls from ring0 without triggering PatchGuard☆33Oct 29, 2025Updated last year
- Use ci.dll API for validating Authenticode signature of files☆171Mar 28, 2022Updated 4 years ago
- Using NtCreateFile and NtDeviceIoControlFile to realize the function of winsock（利用NtCreateFile和NtDeviceIoControlFile 实现winsock的功能）☆128Sep 9, 2022Updated 4 years ago
- A basic 100 loc CPU emulator using the existing code of ntoskrnl.exe☆74Aug 16, 2023Updated 3 years ago
- DWM hooking-based screenshot tool☆39Sep 13, 2025Updated last year
- cr3 shuffle driver☆104Mar 24, 2024Updated 2 years ago
- 使用 Intel 虚拟化特性实现应用层HOOK☆66Sep 11, 2025Updated last year
- Simple, predictable pricing with DigitalOcean hosting • AdAlways know what you'll pay with monthly caps and flat pricing. Enterprise-grade infrastructure trusted by 600k+ customers.
- A series of methods used to detect kernel shellcode for tencent game safe race 2024☆47Apr 22, 2024Updated 2 years ago
- Invisible hook code(support win10 17134 ~ win11 26H1 ) InvisibleHook is an experimental Windows kernel/user-mode research project.☆44Sep 7, 2026Updated 2 months ago
- Another wow64ext to try to be compatible with WOW64 for all architectures.☆100Apr 15, 2026Updated 6 months ago
- Windows kernel-mode reboot-restore driver — NTFS volume filter with copy-on-write redirection☆68Jun 11, 2026Updated 5 months ago
- The AI-friendly binary analysis & decompilation engine — 1:1 lift, built on LLVM [WIP]☆107Updated this week
- query-pdb is a server-side software for parsing PDB files. The software provides PDB online parsing service.☆172Mar 30, 2026Updated 7 months ago
- ☆19Jul 31, 2026Updated 3 months ago
- Lightweight, dependency-free x86-64 CPU emulation library with Unicorn-like guest mode and direct host-memory execution.☆240May 11, 2026Updated 6 months ago
- Process active symbol dumper for advanced shellcode analysis☆13Apr 5, 2026Updated 7 months ago
- Proton VPN Special Offer - Get 70% off • AdSpecial partner offer. Trusted by over 100 million users worldwide. Tested, Approved and Recommended by Experts.
- Windows 用户态行为拦截引擎（HIPS） —— 把 DLL 注入所有进程，hook ntdll / user32 / ws2_32 这些用户态出口，在行为真正发生之前拦下来。☆24Oct 25, 2026Updated 2 weeks ago
- windows defender reading lsass☆15Feb 13, 2026Updated 9 months ago
- ☆108Feb 6, 2026Updated 9 months ago
- 一个windows内核驱动分析框架，对内核所有导出函数进行挂钩监控☆79Nov 19, 2025Updated 11 months ago
- The Kernel-Mode Winsock library, supporting TCP, UDP and Unix sockets (DGRAM and STREAM).☆297Sep 19, 2026Updated last month
- 从MmPfnData中枚举进程和页目录基址☆231Aug 18, 2023Updated 3 years ago
- Anti-Rootkit & System kernel management tool☆86Jun 30, 2026Updated 4 months ago
Are these results useful?