Alternatives and similar repositories for umpm

Users that are interested in umpm are comparing it to the libraries listed below

• idkhidden / WinApiPatcher
  WinApi Patcher is a straightforward tool leveraging windows API hooking to patch and modify certain behaviors in a targeted environment.
  ☆43Updated 9 months ago
• Xacone / Eneio64-Driver-Exploit
  Exploit for eneio64.sys - Turning Physical Memory R/W into Virtual Memory R/W
  ☆39Updated last month
• blueflagss / inline-syscall
  A simple direct syscall wrapper written in C++ with compatibility for x86 and x64 programs.
  ☆53Updated 5 months ago
• etwhook / TartarusInjector
  Native Shellcode Injector Via Handle Hijacking & Pool Party.
  ☆12Updated last year
• PaulNorman01 / Dynamizer
  Reduce Dynamic Analysis Detection Rates With Built-In Unhooker, Anti Analysis Techniques, And String Obfuscator Modules.
  ☆19Updated 2 years ago
• unkbyte / measured_boot_poc
  Leveraging TPM2 TCG Logs (Measured Boot) to Detect UEFI Drivers and Pre-Boot Applications
  ☆19Updated 3 months ago
• benheise / bootkit
  UEFI bootkit: Hardware Implant. In-Progress
  ☆15Updated 3 years ago
• Hemogl0bin / drvscanner
  Scan for potentially vulnerable drivers
  ☆88Updated 3 years ago
• AlSch092 / ModifyExports
  Research of modifying exported function names at runtime (C/C++, Windows)
  ☆17Updated last year
• m417z / x64dbg-symbol-tldr
  An x64dbg plugin which helps make sense of long C++ symbols
  ☆59Updated 2 years ago
• byte2mov / anti-breakpoint
  anti breakpoint using job objects in a simple way.
  ☆13Updated last year
• crvvdev / vac-bypass-kernel
  Fully working kernel-mode VAC bypass
  ☆79Updated 4 months ago
• Sherman0236 / XorData
  A C++17 framework designed to enable obfuscation of constants, variables, and strings.
  ☆25Updated last year
• 0mWindyBug / MinifilterHook
  silence file system monitoring components by hooking their minifilters
  ☆57Updated last year
• Flawww / ObfuscatedJumpGenerator
  Dynamically generated obfuscated jumps and/or function calls
  ☆36Updated 2 years ago
• ManulMap / malstring
  Using c++23 compile-time magic to produce obfuscated PIC strings and arrays.
  ☆23Updated last year
• alfarom256 / drivers_and_shit
  ☆59Updated 3 years ago
• yoavshah / SuperHook
  A lightweight and easy to use and understand framework for hooking (x86, x64)
  ☆10Updated last year
• worawit / malk
  Demonstrate calling a kernel function and handle process creation callback against HVCI
  ☆64Updated 2 years ago
• FunnyWhaleDev / AlterLoadDll
  Load dll with undocumented functions and debug symbols
  ☆47Updated 11 months ago
• WHots / RosaryAV
  Lightweight Threat Detection System - (Base)
  ☆15Updated last year
• gmh5225 / Driver-SoulExtraction
  SoulExtraction is a windows driver library for extracting cert information in windows drivers
  ☆24Updated 2 years ago
• zodiacon / Minimal
  ☆16Updated 2 years ago
• DErDYAST1R / SilentFunctionCaller
  Allows for same-file KernelMode function execution using Encrypted addresses of Functions
  ☆42Updated 8 months ago
• ZaweSec / KasperskyHook_NewKSDriver
  ☆34Updated last year
• SkarSys / windows-kernel-trojan
  A windows kernel mode driver that spoofs serial numbers when mapped and executes a malicious payload (FULLY from kernel!!!)
  ☆33Updated 9 months ago
• Azvanzed / vmw-logger-rs
  A VMWare logger using built-in backdoor.
  ☆30Updated 9 months ago
• SurgeGotTappedAgain / Window-Hijack
  ☆58Updated last year
• kkent030315 / detect-anyrun
  ANY.RUN sandbox detection collection
  ☆20Updated 10 months ago
• benheise / ANGRYORCHARD
  A kernel exploit leveraging NtUserHardErrorControl to elevate a thread to KernelMode and achieve arbitrary kernel R/W & more.
  ☆30Updated 2 years ago