Alternatives and similar repositories for rwdriver

Users that are interested in rwdriver are comparing it to the libraries listed below

• lainswork / shellcode-factory
  shellcode 生成框架
  ☆290Updated 3 years ago
• smallzhong / hide_execute_memory
  隐藏可执行内存
  ☆267Updated 9 months ago
• huoji120 / awesome_anti_virus_engine
  about how to make a anti-virus engine
  ☆106Updated 8 months ago
• DATA-GaMi / WindowsKernelBook
  《Windows 内核安全编程技术实践》 系列丛书，探索 Anti RootKit 反内核工具核心原理与技术实现细节。
  ☆77Updated 3 years ago
• WINGS2709 / 360Safe
  大数字驱动逆向代码
  ☆78Updated 2 years ago
• NanoWraith / BlindEdr
  A Blind EDR Project for Educational Purposes
  ☆97Updated last year
• huoji120 / white_patch_detect
  通杀检测基于白文件patch黑代码的免杀技术的后门
  ☆181Updated last year
• Neo-Maoku / Shellcode_Generator
  IDA Python script for generating Windows x86 shellcode with one click
  ☆40Updated 2 years ago
• bigbang95 / ntoskrnl
  Windows 常用版本内核文件收集
  ☆13Updated 2 years ago
• Neo-Maoku / DllMainHijacking
  Resolve the issue of DLLmain function in white and black DLLs hanging when calling shellcode
  ☆201Updated last year
• HARM4Y / Karlann
  It's a kernel-based keylogger for Windows x86/x64.
  ☆143Updated 3 years ago
• FiYHer / driver_callback_bypass_1909
  研究和移除各种内核回调,在anti anti cheat的路上越走越远
  ☆183Updated 3 years ago
• huoji120 / APT_Step_Bear_Inject
  复现《EDR的梦魇：Storm-0978使用新型内核注入技术“Step Bear”》
  ☆161Updated last year
• coldpon / ring3-hidden
  Hide processes, files, services in Windows ring3
  ☆32Updated last year
• jash-git / Windows-Hack-Programming-backup
  WINDOWS黑客編程技術詳解 [Windows-Hack-Programming backup]
  ☆47Updated 6 years ago
• iyzyi / MUA-Remote-Access-Trojan-V2
  MUA远控木马V2，MUA Remote Access Trojan V2
  ☆67Updated 2 years ago
• FiYHer / kernel_window_hide
  内核级别隐藏指定窗口
  ☆320Updated 4 years ago
• clownfive / CppDevShellcode
  使用Visral Studio开发ShellCode
  ☆232Updated 2 years ago
• i1tao / AheadLibEx
  hijack dll Source Code Generator .
  ☆248Updated this week
• L4zyD0g / NimBeacon
  A Cobalt Strike beacon implemented in Nim.
  ☆26Updated 6 months ago
• liangfei44 / VmWareThrough
  ☆225Updated 2 years ago
• theSecHunter / Hades-Windows
  Hades HIDS/HIPS for Windows
  ☆306Updated 3 months ago
• smallzhong / ycpack
  傀儡进程加密壳 滴水三期课后作业
  ☆14Updated 4 years ago
• A-Normal-User / Pretend_HideVirtualMemory
  利用物理内存映射，实现虚拟内存的伪隐藏
  ☆86Updated 3 years ago
• minglinchen / WinKernelDev
  ☆139Updated 5 years ago
• huoji120 / numen
  简单安排一下 autochk.sys 这个rootkit
  ☆73Updated 2 years ago
• UmaRex01 / Hit-And-Run
  A method to execute syscalls while bypassing EDR's function hooking and call stack analysis.
  ☆24Updated 9 months ago
• yj94 / Anti-Sandbox
  ☆70Updated last year
• huoji120 / DuckSandboxDetect
  沙箱测试,测评国内常见沙箱的代码与结论
  ☆106Updated 4 years ago
• DragonQuestHero / Medusa
  Radical Windows ARK
  ☆251Updated 9 months ago