Alternatives and similar repositories for Examples:

Users that are interested in Examples are comparing it to the libraries listed below

• POPFD / HypervisorBase
  A library for intel VT-x hypervisor functionality supporting EPT shadowing.
  ☆48Updated 3 years ago
• Shhoya / Shh0yaKernelHook
  Shh0ya Kernel Hook Driver
  ☆21Updated 4 years ago
• ioncodes / pooldump
  ☆29Updated 3 years ago
• ioncodes / rapid-kdbg-hyperv
  ☆15Updated last year
• KelvinMsft / UsbMon
  ☆34Updated 4 years ago
• Vicshann / PEProtectDrv
  Some crazy PE executables protection kernel driver
  ☆18Updated 4 years ago
• alal4465 / Practical-Reverse-Engineering-Solutions
  Some drivers I've written while solving exercises from Practical Reverse Engineering
  ☆15Updated 3 years ago
• archercreat / vdk
  vdk is a set of utilities used to help with exploitation of a vulnerable driver.
  ☆39Updated 2 years ago
• ch3rn0byl / CVE-2021-21551
  ☆26Updated 3 years ago
• moukayz / KernelDriverDemo
  ☆24Updated 5 years ago
• malware-unicorn / pteroioctl-hook
  A driver to implement IOCTL hooking
  ☆24Updated 2 years ago
• anzelesnik / MySyscall
  Example of hijacking system calls via function pointer tables
  ☆32Updated 3 years ago
• alfarom256 / UserVAtoPhysical
  Walks the Process' VAD list to grab the PTE's corresponding to a usermode virtual address, all to get the physical address
  ☆24Updated 3 years ago
• 1401199262 / HookSwapContext
  ☆30Updated last year
• kyREcon / IsKernelDebuggerPresent
  Detects if a Kernel mode debugger is active by reading the value of KUSER_SHARED_DATA.KdDebuggerEnabled. It is a high level and portable …
  ☆23Updated 7 years ago
• ByteWhite1x1 / PatchGuardResearch
  Bypassing kernel patch protection runtime
  ☆19Updated 2 years ago
• DownWithUp / WHPHook
  Simple DLL and client app that work together to hook all the functions in WinHvPlatform.dll in order to provide logging and introspection…
  ☆15Updated 3 years ago
• xtremegamer1 / Illicit-memory-allocation
  This driver hooks a device object for ioctl and uses mdls to allocate physical pages and manually injects an entry into a process's page …
  ☆12Updated 2 years ago
• CZashi / win-reverse
  ntos shit
  ☆23Updated last year
• therealdreg / ida_vmware_windows_gdb
  Helper script for Windows kernel debugging with IDA Pro on VMware + GDB stub (including PDB symbols)
  ☆63Updated last year
• ajkhoury / Windbg2Struct
  Takes a Windbg dumped structure (using the 'dt' command) and formats it into a C structure
  ☆35Updated 7 months ago
• stdhu / windows-kernel-pagehook
  windows kernel pagehook
  ☆38Updated 2 years ago
• NewWorldComingSoon / OAC
  Open Anti Cheat
  ☆27Updated 2 years ago
• helloobaby / Nmi-Callback
  detect hypervisor with Nmi Callback
  ☆34Updated 2 years ago
• therealdreg / windbgtocstruct
  Helper Script to convert a Windbg dumped structure (using the 'dt' command) into a C structure. It creates dummy structs for you if neede…
  ☆26Updated last year
• h4xu3lyn / FuckPg
  Analysing and defeating PatchGuard universally
  ☆34Updated 4 years ago
• expend20 / x64dbg_ext
  Extensions for x64dbg written in Rust: Telescope and Unicorn powered disassembly
  ☆24Updated last year
• alfarom256 / drivers_and_shit
  ☆58Updated 2 years ago
• cxxrev0to1dev / nb_obfuscator
  win32/x64 obfuscate framework
  ☆32Updated 5 years ago
• 1401199262 / HookHvcallCodeVa
  ☆21Updated last year