Alternatives and similar repositories for NtDOOM

Users that are interested in NtDOOM are comparing it to the libraries listed below

• WitherOrNot / warbird-docs
  Documentation of Microsoft's Warbird obfuscation
  ☆51Updated 9 months ago
• irql / carbon
  64 bit monolithic nt-style kernel
  ☆98Updated 4 years ago
• KiFilterFiberContext / windows-software-policy
  Research on obfuscated licensing APIs / CLIP service in the Windows kernel
  ☆111Updated 2 years ago
• can1357 / IdaThemer
  🎨 Seamlessly convert your favorite Visual Studio Code themes to IDA Pro themes.
  ☆111Updated last year
• can1357 / xstd
  A portable header only library extending the C++20 STL.
  ☆77Updated last year
• SamuelTulach / SecureFakePkg
  Simple EFI runtime driver that hooks GetVariable function and returns data expected by Windows to make it think that it's running with se…
  ☆164Updated 3 years ago
• x86matthew / DOSVisor
  x86 Real-Mode MS-DOS Emulator using Windows Hypervisor Platform
  ☆137Updated 11 months ago
• ekknod / smm
  alternative smm driver for ryzen motherboards
  ☆148Updated 7 months ago
• can1357 / hvdetecc
  Collection of hypervisor detections
  ☆236Updated 8 months ago
• can1357 / linux-pe
  COFF and Portable Executable format described using standard C++ with no dependencies.
  ☆284Updated last month
• SamuelTulach / PwnedBoot
  Using Windows' own bootloader as a shim to bypass Secure Boot
  ☆170Updated 10 months ago
• zhuhuibeishadiao / ntoskrnl
  The Windows Research Kernel (WRK)
  ☆196Updated 8 years ago
• enginelesscc / classinformer-ida-90
  Class Informer updated for 32bit targets in 64bit IDA 8.2+/9.0/9.1
  ☆63Updated last month
• SamuelTulach / memhv
  Minimalistic AMD-V/SVM hypervisor with memory introspection capabilities
  ☆262Updated 3 months ago
• m417z / ntdoc
  Native API online documentation, based on the System Informer (formerly Process Hacker) phnt headers
  ☆261Updated last week
• vmctx / guardian-rs
  x86-64 code/pe virtualizer
  ☆188Updated 6 months ago
• Deputation / instrumentation_callbacks
  A proof of concept demonstrating instrumentation callbacks on Windows 10 21h1 with a TLS variable to ensure all syscalls are caught.
  ☆136Updated 3 years ago
• w1redch4d / Artfuscator
  A C compiler targeting an artistically pleasing nightmare for reverse engineers
  ☆97Updated 5 months ago
• sariaki / amd-hypervisor
  a minimalistic windows hypervisor for amd processors
  ☆106Updated 2 years ago
• thesecretclub / SandboxBootkit
  Bootkit for Windows Sandbox to disable DSE/PatchGuard.
  ☆280Updated 7 months ago
• mrexodia / EfiCMake
  CMake template for a basic EFI application/bootkit. This library is header-only, there is no EDK2 runtime!).
  ☆77Updated 2 years ago
• NullArray / WinKernel-Resources
  A list of excellent resources for anyone to deepen their understanding with regards to Windows Kernel Exploitation and general low level …
  ☆143Updated 2 years ago
• SamuelTulach / winzentool
  Port of zentool to Windows
  ☆24Updated 2 months ago
• ch3rn0byl / AngryWindows
  Modifies the Blue Screen of Death for 1909/20h1/20h2/21h1.
  ☆158Updated 2 years ago
• 67-6f-64 / AntiOreans-CodeDevirtualizer
  ☆44Updated 2 years ago
• mrexodia / driver_unpacking
  Ghetto user mode emulation of Windows kernel drivers.
  ☆139Updated 7 months ago
• binsnake / KUBERA
  A x86 environment emulator for Windows user and kernel binaries.
  ☆58Updated this week
• MiroKaku / Musa.Veil
  Collection of undocumented Windows API declarations.
  ☆314Updated this week
• KiFilterFiberContext / warbird-hook
  Using Microsoft Warbird to automatically unpack and execute encrypted shellcode in ClipSp.sys without triggering PatchGuard
  ☆245Updated 2 years ago
• xsh3llsh0ck / Calamity
  Example of using Windows Platform Binary Table (WPBT)
  ☆20Updated last year