Alternatives and similar repositories for windows-kernel-development

Users that are interested in windows-kernel-development are comparing it to the libraries listed below

• Rhydon1337 / linux-kernel-shadow-ssh
  Hiding SSH public keys in SSH server using a kernel agent
  ☆23Updated 5 years ago
• Rhydon1337 / windows-kernel-process-killer
  Force kill a process using windows kernel driver
  ☆25Updated 4 years ago
• Rhydon1337 / linux-kernel-filesystem-filter
  Linux kernel filesystem filter driver
  ☆22Updated 5 years ago
• 0mWindyBug / KeystrokeSniffer
  a windows kernel keylogger that works
  ☆20Updated last year
• Rhydon1337 / windows-kernel-file-protector
  Protect a file from being deleted using windows kernel file system minifilter driver
  ☆40Updated 4 years ago
• 0mWindyBug / FileHide
  filter driver to hide files and directories
  ☆25Updated last year
• 0mWindyBug / MinifilterHook
  silence file system monitoring components by hooking their minifilters
  ☆59Updated 2 years ago
• nbqofficial / CTHD
  Process hiding library
  ☆19Updated 5 years ago
• Rhydon1337 / windows-kernel-process-protector
  Protect a process from code injection, termination and hooking
  ☆49Updated 4 years ago
• 1401199262 / DriverProtect
  ☆16Updated 4 years ago
• Rhydon1337 / windows-kernel-file-delete
  Force a file delete using a windows kernel driver
  ☆72Updated 3 years ago
• SweetIceLolly / Prevent_File_Deletion
  Record & prevent file deletion in kernel mode
  ☆46Updated 5 years ago
• ManulMap / malstring
  Using c++23 compile-time magic to produce obfuscated PIC strings and arrays.
  ☆30Updated last year
• ByteWhite1x1 / PatchGuardResearch
  Bypassing kernel patch protection runtime
  ☆21Updated 2 years ago
• andrew9382 / manual_mapping_dll_injector
  manual mapping injector
  ☆29Updated 4 months ago
• gmh5225 / FakeEnclave
  A poc that abuses Enclave
  ☆40Updated 3 years ago
• NewWorldComingSoon / UnknownField
  UnknownField is a tool based clang that obfuscating the order of fields to protect your C/C++ game or code.
  ☆44Updated 3 years ago
• alfarom256 / drivers_and_shit
  ☆59Updated 3 years ago
• shaygitub / windows-rootkit
  windows rootkit
  ☆60Updated last year
• KANKOSHEV / Detect-VM-and-Hypervisor
  Detect VM and Hypervisor
  ☆10Updated 4 years ago
• hugsy / shared-kernel-user-section-driver
  Experiment to use sections as User/Kernelmode comm vector
  ☆22Updated 2 years ago
• boom-cr3 / NotifyRoutineHijackThread
  Hijack NotifyRoutine for a kernelmode thread
  ☆41Updated 3 years ago
• nelfo / PGHooker
  PAGE_GUARD based hooking library
  ☆52Updated 3 years ago
• backengineering / vmhook
  A demonstration of hooking into the VMProtect-2 virtual machine
  ☆23Updated 2 years ago
• alfarom256 / UserVAtoPhysical
  Walks the Process' VAD list to grab the PTE's corresponding to a usermode virtual address, all to get the physical address
  ☆23Updated 4 years ago
• xu-Wan / HypercallPageHook
  POC Hook of nt!HvcallCodeVa
  ☆54Updated 2 years ago
• he4rtbleed / PPLL
  Protected Process Light Library
  ☆18Updated 5 years ago
• ZaweSec / KasperskyHook_NewKSDriver
  ☆34Updated 2 years ago
• Xyrem / Arbitrary-Physical-Memory-RW
  ☆38Updated 3 years ago
• ntoskrnl7 / ldk
  Load Dll into Kernel space
  ☆39Updated 3 years ago