Alternatives and similar repositories for Sunstrider:

Users that are interested in Sunstrider are comparing it to the libraries listed below

• ajkhoury / Windbg2Struct
  Takes a Windbg dumped structure (using the 'dt' command) and formats it into a C structure
  ☆35Updated 7 months ago
• AntiRootkit / BDArkit
  just an lite AntiRootkit for interesting
  ☆23Updated 9 years ago
• Cr4sh / PTBypass-PoC
  Bypassing code hooks detection in modern anti-rootkits via building faked PTE entries.
  ☆74Updated 14 years ago
• yardenshafir / KernelDataStructureFinder
  Driver and WinDBG scripts to dump information about all resources and lookaside lists
  ☆66Updated 4 years ago
• mq1n / Wow64SyscallHook
  Wow64 syscall hook
  ☆40Updated 7 years ago
• uvbs / VMPDBG2
  ☆34Updated 9 years ago
• wjcsharp / Common
  Shareds for kernel developement
  ☆27Updated 11 years ago
• idkwim / frookSINATRA
  POC of sysenter x64 LSTAR MSR hook
  ☆38Updated 10 years ago
• zer0mem / VadScanner
  PoC of BOOST-ed _EPROCESS.VadRoot iterating
  ☆25Updated 10 years ago
• OkazakiNagisa / VTbasedDebuggerWin7
  by others
  ☆38Updated 7 years ago
• pgarba / UniPE
  UNIPE - A small framwork to execute PE files with UniCorn
  ☆45Updated 7 years ago
• tandasat / ia32-doc
  IA32-doc is a project which aims to put as many definitions from the Intel Manual into machine-processable format as possible
  ☆16Updated 2 years ago
• DOGSHITD / IDTHook_X64
  Hook IDT vector 0xb2 to detect SCI in 64bit windows.
  ☆34Updated 2 years ago
• changeofpace / x64dbg-Anti-Debug-POC
  viewing page boundaries of pages with PAGE_NOACCESS protection reveals the presence of x64dbg.
  ☆23Updated 8 years ago
• h4xu3lyn / FuckPg
  Analysing and defeating PatchGuard universally
  ☆34Updated 4 years ago
• KelvinMsft / UsbMon
  ☆34Updated 4 years ago
• SamLarenN / CapcomDKOM
  My take on the capcom driver vulnerability
  ☆27Updated 7 years ago
• rwfpl / rewolf-ldrdebug
  Helper utility for debugging windows PE/PE+ loader.
  ☆51Updated 9 years ago
• 9176324 / Daat
  a simple intel vt code both support x86 & x64. PatchGuard monitor.
  ☆75Updated 3 years ago
• zhuhuibeishadiao / KernelHooksDetection_x64
  x64 Kernel Hooks Detection
  ☆24Updated 8 years ago
• qiantangbanmu / WProtectvs
  ☆23Updated 7 years ago
• alexvogt91 / NetDriver
  kernel-mode TDI client which can send and receive HTTP requests
  ☆55Updated 6 years ago
• d366 / DarkMMap
  Manual PE image mapper
  ☆62Updated 11 years ago
• 9176324 / SyscallTable
  ☆30Updated 6 years ago
• xiaobfly / AnalyzePdb
  ☆27Updated 5 years ago
• KelvinMsft / NoTruth
  ☆94Updated 7 years ago
• swatkat / arkitlib
  Windows anti-rootkit library
  ☆38Updated 9 years ago
• Volkanite / TestSpoof
  Spoof Windows Test Signing Mode
  ☆29Updated 6 years ago
• zer0mem / ShowMeYourGongFu
  OpenSrc projects; common multiprojects headers store to ./Common/*category*/
  ☆48Updated 10 years ago
• ldebug / Resurgence
  A Windows game hacking framework
  ☆43Updated 8 years ago