KelvinMsft / NoTruthLinks
☆99Updated 7 years ago
Alternatives and similar repositories for NoTruth
Users that are interested in NoTruth are comparing it to the libraries listed below
Sorting:
- first commit☆62Updated 4 years ago
- Collect different versions of Crucial modules.☆144Updated last year
- the basic version of the ring0 physical memory read/write tool☆92Updated 6 years ago
- A hypervisor hiding user-mode memory using EPT☆108Updated 7 years ago
- ☆125Updated 5 years ago
- ayy debuger☆90Updated last year
- Some garbage drivers written for getting started☆66Updated 5 years ago
- fix vmprotect import function used unicorn-engine.☆97Updated 2 years ago
- Windows Driver Kit Extesion Header (Undoc)☆135Updated 3 years ago
- a simple intel vt code both support x86 & x64. PatchGuard monitor.☆76Updated 3 years ago
- Windows Kernel Template Library☆114Updated 3 years ago
- hook msr by amd svm☆124Updated 5 years ago
- Using C++ STL on Windows kernle development☆90Updated 6 years ago
- Communication via callback☆74Updated 5 years ago
- Intercepting DeviceControl via WPP☆135Updated 5 years ago
- Шаблон полнофункционального драйвера и обёртки над ядерным API☆115Updated 9 years ago
- ☆66Updated 5 years ago
- A debugger library using VEH.☆64Updated last year
- Experimental disassembler for x86 binaries virtualized by VMProtect 3☆96Updated 3 years ago
- A library for intel VT-x hypervisor functionality supporting EPT shadowing.☆51Updated 4 years ago
- Some psuedo snippets from BattlEye's BEDaisy.sys loaded on Rainbow Six: Siege.☆127Updated 3 years ago
- 使用vt进行无痕hook,支持r3☆59Updated 6 years ago
- ☆50Updated 4 years ago
- ☆138Updated 2 years ago
- A basic 100 loc CPU emulator using the existing code of ntoskrnl.exe☆72Updated 2 years ago
- x64 syscall caller in C++.☆93Updated 7 years ago
- ☆60Updated 3 years ago
- 可在非测试模式下符号化读取内核内存。Kernel memory can be read symbolically in non test mode。☆110Updated 3 years ago
- 🪝 Various EPT hook detection approaches☆127Updated 2 months ago
- ☆72Updated 3 years ago