Alternatives and similar repositories for simpleAVdriver

Users that are interested in simpleAVdriver are comparing it to the libraries listed below

• tandasat / DrvLoader
  A command line tool to load and unload a device driver.
  ☆47Updated 7 years ago
• SanseoLab / ProcLogger
  Windows Simple Process Logger implemented as driver
  ☆18Updated 7 years ago
• gerronjo / openlibs
  Open Source Libraries Collection
  ☆24Updated 9 years ago
• meiningnie / HookNdis
  a network filter using NDIS hook technique
  ☆19Updated 12 years ago
• SHA-MRIZ / FsMinfilterHooking
  ☆31Updated 4 years ago
• Jyang772 / HideProcessHookMDL
  A simple rootkit to hide a process
  ☆46Updated 11 years ago
• NtRaiseHardError / Dreadnought
  PoC for detecting and dumping code injection (built and extended on UnRunPE)
  ☆56Updated 6 years ago
• MiroKaku / ConMon
  Windows Console Monitor
  ☆34Updated 5 years ago
• aaaddress1 / wow64Jit
  Call 32bit NtDLL API directly from WoW64 Layer
  ☆60Updated 4 years ago
• edix / AlternativeCreateRemoteThread-public
  Load and unload a DLL into an remote process without using WriteProcessMemory ;)
  ☆16Updated 10 years ago
• KelvinMsft / ScreenCapAttack
  ☆33Updated 4 years ago
• gigabitwize / dank
  Driver Loader/BE Bypass/Win Malware(lol)
  ☆34Updated 5 years ago
• JKornev / hijacken
  Analyze and attack windows applications using dll hijacking vulnerabilities
  ☆56Updated 5 years ago
• hMihaiDavid / hooks
  A DLL that performs IAT hooking
  ☆27Updated 6 years ago
• DeDf / WProtect
  ☆40Updated 5 years ago
• sgabe / SymlinkProtect
  File system minifilter driver for Windows to block symbolic link attacks.
  ☆51Updated 4 years ago
• tandasat / RemoteWriteMonitor
  A tool to help malware analysts tell that the sample is injecting code into other process.
  ☆78Updated 9 years ago
• sin5678 / A-Protect
  A-Protect Anti Rootkit Tool
  ☆53Updated 11 years ago
• rwfpl / rewolf-ldrdebug
  Helper utility for debugging windows PE/PE+ loader.
  ☆52Updated 10 years ago
• swatkat / arkitlib
  Windows anti-rootkit library
  ☆39Updated 10 years ago
• guidoreina / http_inspect
  HTTP/HTTPS/DNS inspector (windows driver)
  ☆26Updated 6 years ago
• wolk-1024 / CrossInject
  x86/x64 dll injector
  ☆30Updated 3 years ago
• zhuhuibeishadiao / exploit-RemoteDesktopServerDriver
  exploit termdd.sys(support kb4499175)
  ☆59Updated 5 years ago
• FoundSol / Anti-Hook-
  ☆10Updated 9 years ago
• zhuhuibeishadiao / KernelHooksDetection_x64
  x64 Kernel Hooks Detection
  ☆24Updated 8 years ago
• mq1n / Wow64SyscallHook
  Wow64 syscall hook
  ☆40Updated 8 years ago
• wbenny / avmext
  Anti-Anti-VM solution via Windows Driver
  ☆58Updated 7 years ago
• anzelesnik / MySyscall
  Example of hijacking system calls via function pointer tables
  ☆31Updated 3 years ago
• mgeeky / prc_xchk
  User-mode process cross-checking utility intended to detect naive malware hiding itself by hooking IAT/EAT.
  ☆19Updated 9 years ago
• cxxrev0to1dev / nb_obfuscator
  win32/x64 obfuscate framework
  ☆32Updated 6 years ago