KelvinMsft / PerfMon

Related projects ⓘ

Alternatives and complementary repositories for PerfMon

• Air14 / SymbolicAccess
  Static user/kernel mode library that allows access to all functions and global variables by extracting offsets from the PDB
  ☆73Updated last year
• KelvinMsft / NoTruth
  ☆93Updated 7 years ago
• Rythorndoran / PageTableHook
  ☆125Updated last year
• samshine / VoyagerWithEPT
  ☆26Updated 2 years ago
• fIappy / InfinityHook
  Hook system calls, context switches, page faults and more.
  ☆33Updated 5 years ago
• derek-zhang123 / awesome-windows-reverse
  长期收集Windows内核和vt调试器相关资源，包括源码，工具，书籍，博客等。
  ☆15Updated last month
• 1401199262 / NMIStackWalk
  ☆70Updated 2 years ago
• Yukin02 / Dwm-Overlay
  DWM Overlay without modify .text
  ☆44Updated 2 months ago
• cs1ime / sehcall
  Windows X64 mode use seh in manual mapped dll or manual mapped sys
  ☆67Updated 2 years ago
• zhuhuibeishadiao / JunkDriveOpenSource
  Some garbage drivers written for getting started
  ☆62Updated 4 years ago
• armasm / VirtualSpectre
  a free vt-x&ept debugger
  ☆33Updated 3 years ago
• xyddnljydd / vt-ReloadDbg
  ☆49Updated last year
• 9176324 / Daat
  a simple intel vt code both support x86 & x64. PatchGuard monitor.
  ☆75Updated 3 years ago
• bb33bb / r3epthook
  使用vt进行无痕hook，支持r3
  ☆50Updated 5 years ago
• ilovecsad / veh_hide_memory
  ☆69Updated 2 years ago
• zouxianyu / PhysicalMemoryRW
  the basic version of the ring0 physical memory read/write tool
  ☆89Updated 5 years ago
• armasm / skprotect_source
  x64 free protect Features 1.process/thread handle protect 2.anti taskmgr.exe 3.hide process 4.anti-debugger(user/kernel debugger)
  ☆79Updated 5 years ago
• 3499409631 / ReadPhysicalMemory-Without-API
  This project can bypass most of the AC except for some perverts that enable VT to monitor page tables
  ☆39Updated 6 months ago
• kanren3 / libalpc
  ☆14Updated 3 weeks ago
• MiroKaku / Nt-Modules
  Collect different versions of Crucial modules.
  ☆127Updated 4 months ago
• armasm / dwmhook
  noob hooking dwm for overlay
  ☆73Updated 3 years ago
• IcEy-999 / Ntoskrnl_Viewer
  可在非测试模式下符号化读取内核内存。Kernel memory can be read symbolically in non test mode。
  ☆104Updated 2 years ago
• Oxygen1a1 / DrvMon
  a monitoring windows driver calls kernel api tools
  ☆94Updated 4 months ago
• Kwansy98 / EasyPdb
  A very simple C++ library for download pdb, get rva of function, global variable and offset from struct.
  ☆111Updated 7 months ago
• qq1045551070 / ShotHv
  ShotHv
  ☆125Updated 2 years ago
• haidragon / DriverInjectDll
  InjectDll
  ☆53Updated 6 years ago
• zhuhuibeishadiao / MiniVTx64
  Intel Virtualization Technology demo
  ☆65Updated 8 years ago