Alternatives and similar repositories for docs:

Users that are interested in docs are comparing it to the libraries listed below

• HyperDbg / scripts
  A collection of useful HyperDbg scripts
  ☆30Updated 7 months ago
• HyperDbg / awesome
  A list of awesome resources about HyperDbg
  ☆70Updated 7 months ago
• ajkhoury / Errata1337
  ☆68Updated 4 years ago
• tandasat / ia32-doc
  IA32-doc is a project which aims to put as many definitions from the Intel Manual into machine-processable format as possible
  ☆16Updated 2 years ago
• SinaKarvandi / Pinitor
  An API Monitor based on Instrumentation
  ☆43Updated 7 years ago
• helloobaby / Nmi-Callback
  detect hypervisor with Nmi Callback
  ☆34Updated 2 years ago
• t3ssellate / unmapper
  An automatic tool for fixing dumped PE files
  ☆41Updated 4 years ago
• POPFD / HypervisorBase
  A library for intel VT-x hypervisor functionality supporting EPT shadowing.
  ☆49Updated 4 years ago
• KelvinMsft / NoTruth
  ☆95Updated 7 years ago
• adrianyy / x64-syscall
  x64 syscall caller in C++.
  ☆87Updated 6 years ago
• kkent030315 / NtSymbol
  Resolve DOS MZ executable symbols at runtime
  ☆96Updated 3 years ago
• tandasat / recon2024_demo
  Provides commands to read from and write to arbitrary kernel-mode memory for users with the Administrator privilege. HVCI compatible. No …
  ☆15Updated 9 months ago
• rbapat / KernelInjector
  Stealthy Injector that leverages a vulnerable driver and other exploits to remain undetected
  ☆36Updated 6 years ago
• kkent030315 / ProcessVmAccess
  Two PoC of accessing process virtual memory via NT Kernel
  ☆22Updated 3 years ago
• Rat431 / ColdHide
  (DEPRECATED) A simple anti-anti debug library for Windows
  ☆29Updated 4 years ago
• therealdreg / ida_vmware_windows_gdb
  Helper script for Windows kernel debugging with IDA Pro on VMware + GDB stub (including PDB symbols)
  ☆63Updated last year
• BeneficialCode / KReClassEx
  Kernel ReClassEx
  ☆65Updated last year
• Gbps / CapcomLib
  A reflexive driver loader to bypass Windows DSE (featuring a custom PE loader)
  ☆42Updated 6 years ago
• KelvinMsft / PerfMon
  first commit
  ☆58Updated 4 years ago
• HyperDbg / RedDbg
  Hypervisor-based debugger for AMD processors
  ☆50Updated 10 months ago
• Midi12 / QueryWorkingSetExample
  Just an example of a well-known technique to detect memory tampering via Windows Working Sets.
  ☆16Updated 3 years ago
• Sinclairq / tp-emulator
  A basic 100 loc CPU emulator using the existing code of ntoskrnl.exe
  ☆71Updated last year
• kkent030315 / anyvtop
  x64 Windows implementation of virtual-address to physical-address translation
  ☆40Updated 3 years ago
• SmoLL-iCe / VExDebugger
  A debugger library using VEH.
  ☆48Updated 6 months ago
• Cr4sh / PTBypass-PoC
  Bypassing code hooks detection in modern anti-rootkits via building faked PTE entries.
  ☆75Updated 14 years ago
• GetRektBoy724 / KPDB
  Windows PDB parser for kernel-mode environment.
  ☆95Updated 2 years ago
• kkent030315 / kernel_callbacks
  Bypasses for Windows kernel callbacks PatchGuard protection
  ☆43Updated 3 years ago
• backengineering / Voyager
  A Hyper-V Hacking Framework For Windows 10 x64 (AMD & Intel)
  ☆53Updated last year
• Dracopa / Kernelmode-driver
  Simple IOCTL hooking driver for Kernel- User - Mode communication.
  ☆11Updated 4 years ago
• MeeSong / Sunstrider
  Analyze PatchGuard
  ☆55Updated 6 years ago