Alternatives and similar repositories for Ntoskrnl_Viewer

Users that are interested in Ntoskrnl_Viewer are comparing it to the libraries listed below

• IcEy-999 / Kernel-Special-APC-ReadProcessMemory

  View on GitHub
  Example of reading process memory through kernel special APC
  ☆110Apr 21, 2023Updated 2 years ago
• cs1ime / DICHook

  View on GitHub
  Hook NtDeviceIoControlFile with PatchGuard
  ☆107May 10, 2022Updated 3 years ago
• MapleSwan / enum_real_dirbase

  View on GitHub
  从MmPfnData中枚举进程和页目录基址
  ☆205Aug 18, 2023Updated 2 years ago
• 1401199262 / NMIStackWalk

  View on GitHub
  ☆73Aug 31, 2022Updated 3 years ago
• SDXT / MMInject

  View on GitHub
  Kernel DLL Injector using NX Bit Swapping and VAD hide for hiding injected DLL
  ☆220Nov 12, 2020Updated 5 years ago
• MiroKaku / libwsk

  View on GitHub
  The Kernel-Mode Winsock library, supporting TCP, UDP and Unix sockets (DGRAM and STREAM).
  ☆275Jan 27, 2025Updated last year
• BeneficialCode / WinArk

  View on GitHub
  Windows Anti-Rootkit Tool
  ☆542Dec 31, 2025Updated last month
• BadPlayer555 / KernelGDIDraw

  View on GitHub
  The program draws with win32k gdi functions in the kernel while NtGdiDdDDISubmitCommand is being hooked.
  ☆342Apr 27, 2020Updated 5 years ago
• KelvinMsft / NoTruth

  View on GitHub
  ☆99Oct 6, 2017Updated 8 years ago
• DragonQuestHero / DwmDraw

  View on GitHub
  不使用3环挂钩进行DWM桌面绘制
  ☆82Dec 9, 2021Updated 4 years ago
• 1401199262 / MemoryVirtualization

  View on GitHub
  ☆174Mar 9, 2022Updated 3 years ago
• DragonQuestHero / Medusa

  View on GitHub
  Radical Windows ARK
  ☆251Apr 18, 2025Updated 9 months ago
• IcEy-999 / Drv_Hide_And_Camouflage

  View on GitHub
  ☆307May 11, 2023Updated 2 years ago
• MapleSwan / PageTableHook

  View on GitHub
  ☆144Dec 10, 2022Updated 3 years ago
• xinnie-the-pooh / MS

  View on GitHub
  巨硬
  ☆17Oct 4, 2023Updated 2 years ago
• HadesW / dwm-overlay

  View on GitHub
  Top level overlay drawing for game cheating using dwm.exe
  ☆47Oct 26, 2021Updated 4 years ago
• 1401199262 / Hook-KdTrap

  View on GitHub
  ☆223Mar 11, 2023Updated 2 years ago
• zhuhuibeishadiao / WskHttp

  View on GitHub
  Windows kernel drivers simple HTTP library for modern C++
  ☆40Jul 12, 2018Updated 7 years ago
• WolfyZ99 / Kernel-AntiCheat

  View on GitHub
  ☆70Aug 31, 2021Updated 4 years ago
• lainswork / dwm-screen-shot

  View on GitHub
  将shellcode注入dwm.exe以进行屏幕截取
  ☆355Mar 22, 2022Updated 3 years ago
• DragonQuestHero / Kernel-Anit-Anit-Debug-Plugins

  View on GitHub
  Kernel Anit Anit Debug Plugins 内核反反调试插件
  ☆478Aug 31, 2021Updated 4 years ago
• zxd1994 / vt-debuuger

  View on GitHub
  a debugger use vt technology
  ☆355Jun 30, 2022Updated 3 years ago
• FiYHer / InfinityHookPro

  View on GitHub
  InfinityHookPro Win7 -> Win11 latest
  ☆551Feb 7, 2023Updated 3 years ago
• 1401199262 / RemoteCall

  View on GitHub
  ☆193May 1, 2023Updated 2 years ago
• KelvinMsft / PerfMon

  View on GitHub
  first commit
  ☆64Oct 29, 2020Updated 5 years ago
• liangfei44 / VmWareThrough

  View on GitHub
  ☆225Feb 21, 2023Updated 2 years ago
• armasm / EasyAntiPatchGuard

  View on GitHub
  Easy Anti PatchGuard
  ☆223Apr 9, 2021Updated 4 years ago
• zouxianyu / query-pdb

  View on GitHub
  query-pdb is a server-side software for parsing PDB files. The software provides PDB online parsing service.
  ☆166Oct 27, 2025Updated 3 months ago
• cs1ime / sehcall

  View on GitHub
  Windows X64 mode use seh in manual mapped dll or manual mapped sys
  ☆80Oct 10, 2022Updated 3 years ago
• MapleSwan / dwm-overlay

  View on GitHub
  ☆102Mar 26, 2022Updated 3 years ago
• zouxianyu / KernelHiddenExecute

  View on GitHub
  Hide codes/data in the kernel address space.
  ☆188May 8, 2021Updated 4 years ago
• vxcall / ZwDetectMemoryRead

  View on GitHub
  neat way to detect memory read using nt layer function.
  ☆14Aug 4, 2023Updated 2 years ago
• Oxygen1a1 / DrvMon

  View on GitHub
  a monitoring windows driver calls kernel api tools
  ☆126Jul 5, 2024Updated last year
• armvirus / SinMapper

  View on GitHub
  usermode driver mapper that forcefully loads any signed kernel driver (legit cert) with a big enough section (example: .data, .rdata) to …
  ☆469Jan 3, 2022Updated 4 years ago
• FiYHer / kernel_window_hide

  View on GitHub
  内核级别隐藏指定窗口
  ☆320Feb 9, 2022Updated 4 years ago
• cutecatsandvirtualmachines / SKLib

  View on GitHub
  Standard Kernel Library for Windows manipulation in C++
  ☆199Jun 18, 2025Updated 7 months ago
• KANKOSHEV / NoScreen

  View on GitHub
  Hiding the window from screenshots using the function win32kfull::GreProtectSpriteContent
  ☆624Dec 26, 2024Updated last year
• AdamOron / PatchGuardBypass

  View on GitHub
  Bypassing PatchGuard on modern x64 systems
  ☆265Apr 9, 2023Updated 2 years ago
• Air14 / KDBGDecryptor

  View on GitHub
  A simple example how to decrypt kernel debugger data block
  ☆31Feb 8, 2021Updated 5 years ago