Alternatives and similar repositories for Occulto

Users that are interested in Occulto are comparing it to the libraries listed below

• BeneficialCode / KReClassEx
  Kernel ReClassEx
  ☆64Updated last year
• Ahora57 / Unabomber
  Improved VMP Idea(detect anti-anti-debug tools by bug)
  ☆46Updated 2 years ago
• Oliver-1-1 / DumpDriver
  ☆47Updated last year
• 0mWindyBug / KernelInjector
  PoC kernel to usermode injection
  ☆87Updated last year
• armvirus / VanguardTrace
  Decrypting and intercepting encrypted imports of Vanguards Kernel Driver
  ☆35Updated last year
• weak1337 / CEDetector
  ☆47Updated 3 years ago
• Valthrun / valthrun-uefi-mapper
  Windows driver mapper via the UEFI
  ☆49Updated 3 months ago
• samware-free / cr3driver
  cr3 shuffle driver
  ☆64Updated last year
• iqrw0 / DieDMAProtection
  ☆28Updated last year
• xu-Wan / HypercallPageHook
  POC Hook of nt!HvcallCodeVa
  ☆53Updated 2 years ago
• Mrikan8 / kernel-hook
  Just tried, unusable
  ☆46Updated last year
• Oliver-1-1 / EtwKeyboardDetection
  ☆32Updated last year
• cMiraka / RWCommunication
  ☆43Updated 2 years ago
• SmoLL-iCe / VExDebugger
  A debugger library using VEH.
  ☆64Updated last year
• emlinhax / tableflipper
  partially disable patchguard up to win11 21H2
  ☆18Updated last year
• YouNeverKnow00 / Disable-nmi-callbacks
  Disable NMI Callbacks with Kernelmode Driver
  ☆18Updated 2 years ago
• veryboreddd / Return-address-spoofer
  Illustrates the concept of return address spoofing, and how it is used.
  ☆14Updated 5 years ago
• DErDYAST1R / SilentFunctionCaller
  Allows for same-file KernelMode function execution using Encrypted addresses of Functions
  ☆47Updated last month
• Xyrem / Arbitrary-Physical-Memory-RW
  ☆38Updated 2 years ago
• ReFo0 / hwidinfo
  Hardware ID
  ☆54Updated 3 years ago
• JustasMasiulis / rep_mov_ept_detecc
  ☆84Updated 2 weeks ago
• vasie1337 / sharedsection-driver
  driver that communicates using a shared section
  ☆73Updated 7 months ago
• KANKOSHEV / Detect-MouseClassServiceCallback
  mouseclassservicecallback detection via hook
  ☆52Updated 3 years ago
• ZEROWyt / Kernel-driver-eac-be-
  Made by scammer so i leak for free ! have fun
  ☆55Updated 2 years ago
• crvvdev / intraceptor
  Intraceptor intercept Windows NT API calls and redirect them to a kernel driver to bypass process/threads handle protections.
  ☆30Updated 3 years ago
• nelfo / PGHooker
  PAGE_GUARD based hooking library
  ☆52Updated 3 years ago
• SamuelTulach / MemoryGuard
  Experiment with PAGE_GUARD protection to hide memory from other processes
  ☆51Updated last year
• Sentient111 / ClearDriverTraces
  clearing traces of a loaded driver
  ☆47Updated 3 years ago
• EBalloon / EasyAntiCheat-SRC
  ☆42Updated 3 years ago
• kyle-elliott / DVM
  Symbolic Execution based on lifting amd64 to z3
  ☆28Updated last year