Executes Read/Write process memory with `NtQueryCompositionSurfaceStatistics`
☆24Feb 10, 2024Updated 2 years ago
Alternatives and similar repositories for rwDriver
Users that are interested in rwDriver are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- ☆18Jan 11, 2026Updated 8 months ago
- ☆17Jun 30, 2020Updated 6 years ago
- Windows Kernel Security: Memory Integrity Verification with Disk Verification of ntoskrnl.exe☆28Mar 23, 2025Updated last year
- 无痕hook探测☆48Aug 6, 2025Updated last year
- A Windows Kernel Driver Emulator base on Unicorn, Kernel Memory Dump and some of native environment☆197Aug 27, 2026Updated 3 weeks ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- A simple example how to decrypt kernel debugger data block☆32Feb 8, 2021Updated 5 years ago
- Kernel-based memory hacking framework communicating with a kernel driver via sockets.☆97May 25, 2021Updated 5 years ago
- ☆12Oct 24, 2022Updated 3 years ago
- Experiment to use sections as User/Kernelmode comm vector☆22Apr 7, 2023Updated 3 years ago
- Windows 11 24H2-25H2 Runtime PatchGuard Bypass☆269Nov 4, 2025Updated 10 months ago
- Virtualization Simply Code☆24May 13, 2022Updated 4 years ago
- A simple parser(library) which extracts shimcache data from windows.☆15May 20, 2019Updated 7 years ago
- Enum and Remove Hook in Windows☆54Mar 28, 2026Updated 5 months ago
- cr3 shuffle driver☆96Mar 24, 2024Updated 2 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Emulate Drivers in RING3 with self context mapping or unicorn☆20Jan 1, 2025Updated last year
- Simple utility to watch directory change notifications on a given path☆20Oct 6, 2017Updated 8 years ago
- PE Sections Packer + Loader for Windows - Packs a DLL/EXE file and maps it into the loader (C/C++)☆16Oct 19, 2025Updated 10 months ago
- ☆77Sep 16, 2022Updated 4 years ago
- 大部分常见windows内核文件合集 感谢以下网站给出的版本号参考☆16Mar 4, 2026Updated 6 months ago
- Windows kernel driver that detects hypervisors by probing SIDT/LIDT edge cases, paging/TLB behaviors, privilege transitions, and timing e…☆50Mar 3, 2026Updated 6 months ago
- Wrapper for VMProtect Library (only MSVC)☆34Jul 6, 2018Updated 8 years ago
- Hijacking Hyper-V at Runtime with DDMA☆153Aug 13, 2025Updated last year
- R3劫持所有异常☆14Jan 4, 2021Updated 5 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- ☆22Aug 28, 2024Updated 2 years ago
- Circumvents HWID bans on the rhythm game osu☆11Aug 4, 2019Updated 7 years ago
- ☆48Jul 7, 2024Updated 2 years ago
- Vectored Exception Handling Hooking Class☆168Jan 14, 2019Updated 7 years ago
- a simple intel vt code both support x86 & x64. PatchGuard monitor.☆76Oct 28, 2021Updated 4 years ago
- KNSoft.NDK provides native C/C++ definitions and import libraries for Windows NT.☆25Updated this week
- ☆41Feb 16, 2024Updated 2 years ago
- WinDbg-Samples ExdiGdbSrv fork 修复了一部分Vmware调试的问题☆33Jul 10, 2023Updated 3 years ago
- nmi stackwalking + module verification☆176Dec 28, 2023Updated 2 years ago
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- ☆101Oct 6, 2017Updated 8 years ago
- A Kernel Driver that can be used for a cheat or malware base to circumvent common cache & structure table checks. PsLoadedModuleList howe…☆225Apr 23, 2026Updated 4 months ago
- Memory hacking library powered by AMD SVM☆27Mar 16, 2023Updated 3 years ago
- It's a kernel-based keylogger for Windows x86/x64.☆149Sep 18, 2022Updated 4 years ago
- Harness to issue Virtual Secure Mode (VSM) "secure calls" from VTL 0 to VTL 1☆83Sep 8, 2025Updated last year
- DWM hooking-based screenshot tool☆37Sep 13, 2025Updated last year
- ☆13Sep 21, 2025Updated 11 months ago