Alternatives and similar repositories for FsMinfilterHooking

Users that are interested in FsMinfilterHooking are comparing it to the libraries listed below

• kouzhudong / libdrv
  Static Library For Windows Drivers
  ☆41Updated last month
• bb107 / RtlWow64
  c++ implementation of windows heavens gate
  ☆70Updated 5 years ago
• BeneficialCode / WmipCodeSamples
  What makes it page
  ☆17Updated 3 years ago
• moukayz / KernelDriverDemo
  ☆24Updated 6 years ago
• llkbkh / Anti-Rootkit
  ☆53Updated 3 years ago
• Rhydon1337 / windows-kernel-file-protector
  Protect a file from being deleted using windows kernel file system minifilter driver
  ☆40Updated 4 years ago
• MiroKaku / ConMon
  Windows Console Monitor
  ☆34Updated 6 years ago
• he4rtbleed / PPLL
  Protected Process Light Library
  ☆18Updated 5 years ago
• KelvinMsft / UsbMon
  ☆39Updated 5 years ago
• nmgwddj / A-Protect
  ☆24Updated 7 years ago
• stdhu / windows-kernel-pagehook
  windows kernel pagehook
  ☆41Updated 3 years ago
• anzelesnik / MySyscall
  Example of hijacking system calls via function pointer tables
  ☆31Updated 4 years ago
• gmh5225 / FakeEnclave
  A poc that abuses Enclave
  ☆40Updated 3 years ago
• 0ffffffffh / system_call_hook_win10_1903
  This is the P.O.C source for hooking the system calls on Windows 10 (1903) using it's dynamic trace feature weakness
  ☆53Updated 6 years ago
• senko37 / createprocessnotify-hook
  PsSetCreateProcessNotifyRoutine/Ex/Ex2 hook
  ☆12Updated last year
• 9176324 / Daat
  a simple intel vt code both support x86 & x64. PatchGuard monitor.
  ☆77Updated 4 years ago
• zodiacon / DbgPrint
  Debug Print viewer (user and kernel)
  ☆71Updated 2 years ago
• h4xu3lyn / FuckPg
  Analysing and defeating PatchGuard universally
  ☆36Updated 5 years ago
• addrianyy / asmlib_x64
  x64 assembler library
  ☆31Updated last year
• msmania / hk
  Injector with kernel power
  ☆18Updated 5 years ago
• alexvogt91 / NetDriver
  kernel-mode TDI client which can send and receive HTTP requests
  ☆56Updated 7 years ago
• alfarom256 / UserVAtoPhysical
  Walks the Process' VAD list to grab the PTE's corresponding to a usermode virtual address, all to get the physical address
  ☆23Updated 4 years ago
• mike024wk / KeHook64
  Kernel Hook X64
  ☆26Updated 5 years ago
• NewWorldComingSoon / UnknownField
  UnknownField is a tool based clang that obfuscating the order of fields to protect your C/C++ game or code.
  ☆44Updated 3 years ago
• ajkhoury / windbg_to_c
  Translates WinDbg "dt" structure dump to a C structure
  ☆13Updated 5 years ago
• Alex3434 / GetHDDSerial
  Different ways to get the HDD Serial
  ☆39Updated 7 years ago
• ByteWhite1x1 / PatchGuardResearch
  Bypassing kernel patch protection runtime
  ☆21Updated 2 years ago
• 1401199262 / HookHvcallCodeVa
  ☆23Updated 2 years ago
• cxxrev0to1dev / nb_obfuscator
  win32/x64 obfuscate framework
  ☆33Updated 6 years ago
• bytesundso / SneakCalls
  direct systemcalls with a modern c++20 interface.
  ☆45Updated 3 years ago