KelvinMsft / NoTruth
☆94Updated 7 years ago
Alternatives and similar repositories for NoTruth:
Users that are interested in NoTruth are comparing it to the libraries listed below
- first commit☆57Updated 4 years ago
- a simple intel vt code both support x86 & x64. PatchGuard monitor.☆75Updated 3 years ago
- Collect different versions of Crucial modules.☆130Updated 7 months ago
- ☆123Updated 4 years ago
- fix vmprotect import function used unicorn-engine.☆92Updated last year
- Some garbage drivers written for getting started☆64Updated 5 years ago
- the basic version of the ring0 physical memory read/write tool☆89Updated 5 years ago
- A hypervisor hiding user-mode memory using EPT☆106Updated 7 years ago
- Static user/kernel mode library that allows access to all functions and global variables by extracting offsets from the PDB☆81Updated last year
- Kernel ReClassEx☆65Updated last year
- ☆126Updated 2 years ago
- A library for intel VT-x hypervisor functionality supporting EPT shadowing.☆49Updated 3 years ago
- A basic 100 loc CPU emulator using the existing code of ntoskrnl.exe☆71Updated last year
- ☆67Updated 4 years ago
- Intercepting DeviceControl via WPP☆130Updated 5 years ago
- ☆32Updated 2 years ago
- Ghetto user mode emulation of Windows kernel drivers.☆131Updated 4 months ago
- ayy debuger☆89Updated last year
- Some psuedo snippets from BattlEye's BEDaisy.sys loaded on Rainbow Six: Siege.☆123Updated 2 years ago
- ☆71Updated 2 years ago
- reverse engineering of bedaisy.sys (battleyes kernel driver) - Aki2k/BEDaisy☆79Updated 4 years ago
- Different aproaches to detecting EPT hooks☆96Updated 2 years ago
- VM devirtualization PoC based on AsmJit and llvm☆112Updated 3 years ago
- Discarded Section Manual Map☆66Updated 4 years ago
- hook msr by amd svm☆119Updated 5 years ago
- 可在非测试模式下符号化读取内核内存。Kernel memory can be read symbolically in non test mode。☆107Updated 2 years ago
- Windows Kernel Template Library☆109Updated 2 years ago
- Windows Driver Kit Extesion Header (Undoc)☆132Updated 3 years ago
- Resolve DOS MZ executable symbols at runtime☆96Updated 3 years ago
- Enable SEH support for manual mapped x86-32bit PEs☆66Updated 5 years ago