Alternatives and similar repositories for papers

Users that are interested in papers are comparing it to the libraries listed below

• GetRektBoy724 / KPDB
  Windows PDB parser for kernel-mode environment.
  ☆98Updated 3 months ago
• xsh3llsh0ck / ResilienceKit
  Another UEFI runtime bootkit
  ☆31Updated 2 years ago
• brew02 / BudgetEPT
  Create stealthy, inline, EPT-like hooks using SMAP and SMEP
  ☆59Updated 11 months ago
• jonomango / chum
  Binary rewriter for 64-bit PE files.
  ☆84Updated last year
• yardenshafir / cet-research
  A collection of tools, source code, and papers researching Windows' implementation of CET.
  ☆85Updated 4 years ago
• Sinclairq / tp-emulator
  A basic 100 loc CPU emulator using the existing code of ntoskrnl.exe
  ☆72Updated 2 years ago
• tandasat / hvext
  The Windbg extensions to study Hyper-V on Intel and AMD processors.
  ☆164Updated 3 weeks ago
• Lima-X / Singularity
  x64 PE-COFF virtualization driven obfuscation engine
  ☆57Updated 2 years ago
• RIscRIpt / wdmcpp
  Visual Studio Project example for using Microsoft's STL in WDM (Windows Kernel-mode Driver)
  ☆25Updated 4 years ago
• SamuelTulach / SecureGame
  Proof-of-concept game using VBS enclaves to protect itself from cheating
  ☆43Updated 10 months ago
• KiFilterFiberContext / warbird-obfuscator
  Integration of Microsoft Warbird with the MSVC compiler
  ☆112Updated 2 years ago
• vmsplit / icekit
  I/O Cache-As-Ram + AMD x86_64 cache line locking | Mirror of https://codeberg.org/3itch/icekit
  ☆17Updated 6 months ago
• Fatmike-GH / Fatpack
  A Windows executable (PE) packer (x64) with LZMA compression and with full TLS (Thread Local Storage) support
  ☆78Updated this week
• mrexodia / EfiCMake
  CMake template for a basic EFI application/bootkit. This library is header-only, there is no EDK2 runtime!).
  ☆79Updated 3 years ago
• jeperez / WinREPL
  x86 and x64 assembly "read-eval-print loop" for Windows
  ☆31Updated 8 years ago
• BeneficialCode / KReClassEx
  Kernel ReClassEx
  ☆64Updated last year
• daaximus / arch_enum
  A small tool for rapid enumeration of CPUID, and MSR fields.
  ☆25Updated last year
• POPFD / HypervisorBase
  A library for intel VT-x hypervisor functionality supporting EPT shadowing.
  ☆51Updated 4 years ago
• sh4m2hwz / devirt_vmp
  devirtualization vmprotect
  ☆62Updated 2 years ago
• AaLl86 / WindowsInternals
  Contains all the applications developed for the Second part of the 7th Edition of Windows Internals book
  ☆114Updated last year
• hasherezade / mal_unpack_drv
  MalUnpack companion driver
  ☆99Updated last year
• 0mWindyBug / WFPCalloutReserach
  research revolving the windows filtering platform callout mechanism
  ☆33Updated last year
• mike1k / pepp
  C++ library for parsing and manipulating PE files statically and dynamically.
  ☆88Updated 2 years ago
• not-wlan / instrumentation-callbacks
  based on https://github.com/secrary/Hooking-via-InstrumentationCallback
  ☆71Updated 5 years ago
• 1hAck-0 / zeroimport
  ZeroImport is a lightweight and easy to use C++ library for Windows Kernel Drivers. It allows you to hide any import in your kernel drive…
  ☆47Updated 2 years ago
• donnaskiez / hv
  intel vt-x type 2 hypervisor
  ☆56Updated 5 months ago
• kotae4 / ntkernel-dev-notes
  ☆21Updated 4 years ago
• binsnake / KUBERA
  A x86_64 software emulator
  ☆149Updated 3 weeks ago
• stdhu / windows-kernel-pagehook
  windows kernel pagehook
  ☆40Updated 2 years ago
• xtremegamer1 / Illicit-memory-allocation
  This driver hooks a device object for ioctl and uses mdls to allocate physical pages and manually injects an entry into a process's page …
  ☆15Updated 2 years ago