Alternatives and similar repositories for hwidspoofer

Users that are interested in hwidspoofer are comparing it to the libraries listed below

• ReFo0 / hwidinfo

  View on GitHub
  Hardware ID
  ☆64Apr 21, 2022Updated 3 years ago
• DErDYAST1R / 64KernelDriverCleaner

  View on GitHub
  A Kernel Driver that can be used for a cheat or malware base to circumvent common cache & structure table checks. PsLoadedModuleList howe…
  ☆202Sep 27, 2025Updated 4 months ago
• semihcevik / hwidspoofer

  View on GitHub
  HardwareID Spoofer using kernelmode
  ☆227May 18, 2025Updated 8 months ago
• YouNeverKnow00 / Kernelmode-DLL-Injector

  View on GitHub
  Simple Kernelmode DLL Injector with Manual mapping
  ☆335Nov 29, 2023Updated 2 years ago
• armvirus / CosMapper

  View on GitHub
  Loads a signed kernel driver which allows you to map any driver to kernel mode without any traces of the signed / mapped driver.
  ☆377Aug 8, 2021Updated 4 years ago
• Spuckwaffel / Kernel-Thread-Driver

  View on GitHub
  This is a simple project of a driver + usermode.
  ☆169Jan 31, 2022Updated 4 years ago
• charliewolfe / Stealthy-Kernelmode-Injector

  View on GitHub
  Manual mapper that uses PTE manipulation, Virtual Address Descriptor (VAD) manipulation, and forceful memory allocation to hide executabl…
  ☆382Jan 29, 2022Updated 4 years ago
• ekknod / acdrv

  View on GitHub
  base for testing
  ☆186Sep 28, 2024Updated last year
• adspro15 / km-um-communication

  View on GitHub
  A somewhat wide collection of various kernelmode-usermode communication methods in one repository (mainly just for learning purposes).
  ☆383Sep 18, 2019Updated 6 years ago
• SamuelTulach / meme-rw

  View on GitHub
  Archive R/W into any protected process by changing the value of KTHREAD->PreviousMode
  ☆163Jul 31, 2022Updated 3 years ago
• kkent030315 / anymapper

  View on GitHub
  x64 Windows kernel driver mapper, inject unsigned driver using anycall
  ☆199Feb 14, 2024Updated 2 years ago
• DErDYAST1R / NmiCallbackBlocker

  View on GitHub
  Kernel Level NMI Callback Blocker
  ☆157Sep 27, 2025Updated 4 months ago
• SamuelTulach / RwxMeme

  View on GitHub
  State of the art DLL injector that took 20 minutes to make
  ☆226Aug 16, 2023Updated 2 years ago
• kprprivate / EAC-CR3-BYPASS

  View on GitHub
  A simple UM + KM example of how to bypass EAC CR3
  ☆183Oct 13, 2025Updated 4 months ago
• NullTerminatorr / NullHook

  View on GitHub
  Kernel driver that .text hooks a syscall in dxgkrnl.sys which can be called from our user-mode client to send instructions like rpm/wpm a…
  ☆204Dec 16, 2022Updated 3 years ago
• armvirus / SinMapper

  View on GitHub
  usermode driver mapper that forcefully loads any signed kernel driver (legit cert) with a big enough section (example: .data, .rdata) to …
  ☆469Jan 3, 2022Updated 4 years ago
• ReFo0 / anti-crack-system

  View on GitHub
  anti crack system protector
  ☆108Nov 27, 2023Updated 2 years ago
• kkent030315 / anycall

  View on GitHub
  x64 Windows kernel code execution via user-mode, arbitrary syscall, vulnerable IOCTLs demonstration
  ☆384Jul 6, 2022Updated 3 years ago
• SamuelTulach / mutante

  View on GitHub
  Kernel-mode Windows HWID spoofer
  ☆605Jan 22, 2024Updated 2 years ago
• vasie1337 / sharedsection-driver

  View on GitHub
  driver that communicates using a shared section
  ☆86Mar 17, 2025Updated 10 months ago
• zer0condition / NVDrv

  View on GitHub
  Abusing nvidia driver (nvoclock.sys) for physical/virtual memory and control register manipulation.
  ☆277Aug 25, 2023Updated 2 years ago
• VollRagm / lpmapper

  View on GitHub
  A mapper that maps shellcode into loaded large page drivers
  ☆321Apr 26, 2022Updated 3 years ago
• ekknod / MouseClassServiceCallbackTrick

  View on GitHub
  ☆63Sep 28, 2022Updated 3 years ago
• SamuelTulach / eac_cr3_shuffle

  View on GitHub
  ☆90Oct 6, 2023Updated 2 years ago
• BadPlayer555 / KernelGDIDraw

  View on GitHub
  The program draws with win32k gdi functions in the kernel while NtGdiDdDDISubmitCommand is being hooked.
  ☆342Apr 27, 2020Updated 5 years ago
• paysonism / Payson-Injector

  View on GitHub
  A kernel injector for EAC and BE
  ☆156May 3, 2024Updated last year
• MmMapIoSpace / UCMapper

  View on GitHub
  Unknowncheats Magically Optimized Tidy Mapper using nvaudio
  ☆150Jun 11, 2024Updated last year
• ryan-weil / ReadWriteDriver

  View on GitHub
  A kernel driver for reading and writing memory
  ☆316May 12, 2023Updated 2 years ago
• hcmzah / data-ptr-comm

  View on GitHub
  Communicate between user-mode and kernel-mode through a swapped QWORD pointer argument.
  ☆174Feb 9, 2022Updated 4 years ago
• EBalloon / MapPage

  View on GitHub
  Mapping your code on a 0x1000 size page
  ☆71May 20, 2022Updated 3 years ago
• MapleSwan / enum_real_dirbase

  View on GitHub
  从MmPfnData中枚举进程和页目录基址
  ☆205Aug 18, 2023Updated 2 years ago
• zer0condition / GDRVLib

  View on GitHub
  Virtual and physical memory hacking library using gigabyte vulnerable driver
  ☆71Apr 9, 2023Updated 2 years ago
• samware-free / cr3driver

  View on GitHub
  cr3 shuffle driver
  ☆73Mar 24, 2024Updated last year
• ccdescipline / CInject

  View on GitHub
  Windows Kernel inject (no module no thread)
  ☆282Nov 11, 2022Updated 3 years ago
• r1cky33 / krnl-gdi-render

  View on GitHub
  ☆109Nov 13, 2023Updated 2 years ago
• Sinclairq / DataCommunication

  View on GitHub
  A kernelmode driver swapping a .data pointer in the kernel to perform communication between the kernel and usermode.
  ☆143Oct 20, 2020Updated 5 years ago
• adrianyy / rw_socket_driver

  View on GitHub
  Driver that uses network sockets to communicate with client and read/ write protected process memory.
  ☆622Feb 22, 2019Updated 6 years ago
• zer0condition / Shadow-Regions-Bypass

  View on GitHub
  External Base for bypassing Shadow Regions in Valorant
  ☆303Nov 5, 2024Updated last year
• paysonism / payson-ioctl-cheat-driver

  View on GitHub
  Read and Write process memory with this ioctl driver base. This is great for free cheats and learning kernel.
  ☆150May 30, 2024Updated last year