Alternatives and similar repositories for Drv_Hide_And_Camouflage

Users that are interested in Drv_Hide_And_Camouflage are comparing it to the libraries listed below

• MapleSwan / enum_real_dirbase

  View on GitHub
  从MmPfnData中枚举进程和页目录基址
  ☆205Aug 18, 2023Updated 2 years ago
• FiYHer / InfinityHookPro

  View on GitHub
  InfinityHookPro Win7 -> Win11 latest
  ☆551Feb 7, 2023Updated 3 years ago
• 1401199262 / RemoteCall

  View on GitHub
  ☆193May 1, 2023Updated 2 years ago
• DragonQuestHero / Medusa

  View on GitHub
  Radical Windows ARK
  ☆251Apr 18, 2025Updated 10 months ago
• Oxygen1a1 / oxgenPdb

  View on GitHub
  a Windows kernel Pdb parsing and downloading library that running purely in kernel mode without any R3 programs.
  ☆176Sep 13, 2024Updated last year
• MapleSwan / PageTableHook

  View on GitHub
  ☆144Dec 10, 2022Updated 3 years ago
• Oxygen1a1 / InfinityHook_latest

  View on GitHub
  etw hook (syscall/infinity hook) compatible with the latest Windows version of PG
  ☆322Apr 27, 2024Updated last year
• Oxygen1a1 / DrvMon

  View on GitHub
  a monitoring windows driver calls kernel api tools
  ☆126Jul 5, 2024Updated last year
• IcEy-999 / Ntoskrnl_Viewer

  View on GitHub
  可在非测试模式下符号化读取内核内存。Kernel memory can be read symbolically in non test mode。
  ☆109Sep 1, 2022Updated 3 years ago
• liangfei44 / VmWareThrough

  View on GitHub
  ☆225Feb 21, 2023Updated 2 years ago
• zxd1994 / vt-debuuger

  View on GitHub
  a debugger use vt technology
  ☆355Jun 30, 2022Updated 3 years ago
• IcEy-999 / Kernel-Special-APC-ReadProcessMemory

  View on GitHub
  Example of reading process memory through kernel special APC
  ☆110Apr 21, 2023Updated 2 years ago
• BeneficialCode / WinArk

  View on GitHub
  Windows Anti-Rootkit Tool
  ☆544Dec 31, 2025Updated last month
• 1401199262 / Hook-KdTrap

  View on GitHub
  ☆223Mar 11, 2023Updated 2 years ago
• 1401199262 / MemoryVirtualization

  View on GitHub
  ☆174Mar 9, 2022Updated 3 years ago
• rogxo / ReadPhys

  View on GitHub
  r/w virtual memory without attach
  ☆216Oct 19, 2023Updated 2 years ago
• qq1045551070 / ShotHv

  View on GitHub
  ShotHv
  ☆152Mar 8, 2022Updated 3 years ago
• cs1ime / DICHook

  View on GitHub
  Hook NtDeviceIoControlFile with PatchGuard
  ☆107May 10, 2022Updated 3 years ago
• Air14 / SymbolicAccess

  View on GitHub
  Static user/kernel mode library that allows access to all functions and global variables by extracting offsets from the PDB
  ☆117May 29, 2025Updated 8 months ago
• Air14 / airhv

  View on GitHub
  Simple Intel VT-x hypervisor
  ☆359Dec 10, 2023Updated 2 years ago
• lainswork / dwm-screen-shot

  View on GitHub
  将shellcode注入dwm.exe以进行屏幕截取
  ☆355Mar 22, 2022Updated 3 years ago
• 9176324 / Shark

  View on GitHub
  Turn off PatchGuard in real time for win7 (7600) ~ later
  ☆1,037Apr 21, 2022Updated 3 years ago
• 2367765883 / hidedriver-normal

  View on GitHub
  ☆45Sep 25, 2024Updated last year
• Oxygen1a1 / callstack_spoof

  View on GitHub
  ☆128Sep 24, 2023Updated 2 years ago
• cs1ime / KernelDwm

  View on GitHub
  Kernel dwm render
  ☆168Oct 10, 2023Updated 2 years ago
• MiroKaku / DetoursX

  View on GitHub
  Kernel-Mode extended version of https://github.com/microsoft/Detours
  ☆180Jun 1, 2025Updated 8 months ago
• AdamOron / PatchGuardBypass

  View on GitHub
  Bypassing PatchGuard on modern x64 systems
  ☆265Apr 9, 2023Updated 2 years ago
• zhuhuibeishadiao / PFHook

  View on GitHub
  Page fault hook use ept (Intel Virtualization Technology)
  ☆200Oct 19, 2016Updated 9 years ago
• wbaby / DoubleCallBack

  View on GitHub
  ☆184May 20, 2022Updated 3 years ago
• MmMapIoSpace / UCMapper

  View on GitHub
  Unknowncheats Magically Optimized Tidy Mapper using nvaudio
  ☆150Jun 11, 2024Updated last year
• armvirus / SinMapper

  View on GitHub
  usermode driver mapper that forcefully loads any signed kernel driver (legit cert) with a big enough section (example: .data, .rdata) to …
  ☆469Jan 3, 2022Updated 4 years ago
• KANKOSHEV / NoScreen

  View on GitHub
  Hiding the window from screenshots using the function win32kfull::GreProtectSpriteContent
  ☆625Dec 26, 2024Updated last year
• Air14 / HyperHide

  View on GitHub
  Hypervisor based anti anti debug plugin for x64dbg
  ☆1,550Jul 8, 2024Updated last year
• Oxygen1a1 / kcrypt

  View on GitHub
  an encryption library designed for Windows kernel and driver programming
  ☆123Aug 4, 2023Updated 2 years ago
• jonomango / hv

  View on GitHub
  Lightweight Intel VT-x Hypervisor.
  ☆660Dec 17, 2024Updated last year
• HARM4Y / Karlann

  View on GitHub
  It's a kernel-based keylogger for Windows x86/x64.
  ☆145Sep 18, 2022Updated 3 years ago
• 3499409631 / ReadPhysicalMemory-Without-API

  View on GitHub
  This project can bypass most of the AC except for some perverts that enable VT to monitor page tables
  ☆55May 16, 2024Updated last year
• Sqdwr / HideDriver

  View on GitHub
  之前那份是7600的，每次编译搞得好麻烦。更新一个VS2017可以直接编译的。
  ☆154Jun 5, 2019Updated 6 years ago
• MiroKaku / libwsk

  View on GitHub
  The Kernel-Mode Winsock library, supporting TCP, UDP and Unix sockets (DGRAM and STREAM).
  ☆275Jan 27, 2025Updated last year