KelvinMsft / NoTruthLinks
☆97Updated 7 years ago
Alternatives and similar repositories for NoTruth
Users that are interested in NoTruth are comparing it to the libraries listed below
Sorting:
- Collect different versions of Crucial modules.☆142Updated 11 months ago
- ☆125Updated 5 years ago
- first commit☆62Updated 4 years ago
- A hypervisor hiding user-mode memory using EPT☆108Updated 7 years ago
- fix vmprotect import function used unicorn-engine.☆93Updated 2 years ago
- the basic version of the ring0 physical memory read/write tool☆89Updated 5 years ago
- Intercepting DeviceControl via WPP☆134Updated 5 years ago
- VM devirtualization PoC based on AsmJit and llvm☆114Updated 3 years ago
- unorthodox approach to analyze a trace, but this helped me get comfy with x64 instructions overall (excluding sse/avx/etc lol), cleared u…☆60Updated last year
- a simple intel vt code both support x86 & x64. PatchGuard monitor.☆75Updated 3 years ago
- hook msr by amd svm☆121Updated 5 years ago
- Some garbage drivers written for getting started☆65Updated 5 years ago
- A basic 100 loc CPU emulator using the existing code of ntoskrnl.exe☆71Updated last year
- ☆72Updated 2 years ago
- C++ library for parsing and manipulating PE files statically and dynamically.☆88Updated last year
- Windows Driver Kit Extesion Header (Undoc)☆135Updated 3 years ago
- ayy debuger☆89Updated last year
- Static user/kernel mode library that allows access to all functions and global variables by extracting offsets from the PDB☆94Updated 3 weeks ago
- A library for intel VT-x hypervisor functionality supporting EPT shadowing.☆50Updated 4 years ago
- ☆44Updated 2 years ago
- ☆68Updated 4 years ago
- Some psuedo snippets from BattlEye's BEDaisy.sys loaded on Rainbow Six: Siege.☆124Updated 3 years ago
- 可在非测试模式下符号化读取内核内存。Kernel memory can be read symbolically in non test mode。☆109Updated 2 years ago
- A repository of IDA Databases and Binaries used for the analysis of popular commercial virtual-machine obfuscators☆70Updated 2 years ago
- A simple ida python script to find .data ptr☆51Updated 2 years ago
- A ProcMon-esque tool for monitoring Windows Kernel Drivers☆58Updated 4 years ago
- Kernel ReClassEx☆62Updated last year
- 🪝 Different aproaches to detecting EPT hooks☆112Updated 3 years ago
- ☆138Updated 2 years ago
- A simple x86_64 AMD-v hypervisor type-2 Programmed with C++, with soon to be added syscall hooks. [W.I.P]☆96Updated last year