Windows x64 kernel call stack spoofing research project featuring synthetic stack construction, return address manipulation, and stealth-oriented wrapper shellcode execution in legitimate modules.
☆69Apr 6, 2026Updated 7 months ago
Alternatives and similar repositories for CallStackSpoof
Users that are interested in CallStackSpoof are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Invisible hook code(support win10 17134 ~ win11 26H1 ) InvisibleHook is an experimental Windows kernel/user-mode research project.☆44Sep 7, 2026Updated 2 months ago
- Windows x64 kernel driver research project focused on driver image remapping(manual mapping), system-call callback hijacking, and user-mo…☆24Sep 4, 2026Updated 2 months ago
- ☆55Apr 23, 2026Updated 6 months ago
- Experimental Windows kernel driver PoCs for detecting manually mapped drivers via big pool enumeration, PTE walking, CFG data-pointer hoo…☆22Apr 26, 2026Updated 6 months ago
- 无痕hook探测☆50Aug 6, 2025Updated last year
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Lightweight, dependency-free x86-64 CPU emulation library with Unicorn-like guest mode and direct host-memory execution.☆240May 11, 2026Updated 6 months ago
- r/w virtual memory without attach☆236Oct 19, 2023Updated 3 years ago
- AMD NPT stealth breakpoint / anti-anti-debug research framework☆18Sep 5, 2026Updated 2 months ago
- 硬件虚拟化☆65Aug 13, 2025Updated last year
- 一个windows内核驱动分析框架，对内核所有导出函数进行挂钩监控☆79Nov 19, 2025Updated 11 months ago
- （communication detected）a kernel driver for game cheater. includes read&write memory / key&mouse simulator / kernel DWM render / process …☆125May 9, 2025Updated last year
- 从MmPfnData中枚举进程和页目录基址☆231Aug 18, 2023Updated 3 years ago
- 一个仅使用2字节修改实现内核任意函数hook的方法。☆58May 17, 2025Updated last year
- a Windows kernel Pdb parsing and downloading library that running purely in kernel mode without any R3 programs.☆185Sep 13, 2024Updated 2 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- A .data pointer hook with communication in windows 11☆48Nov 9, 2025Updated last year
- ☆29Aug 27, 2025Updated last year
- Static user/kernel mode library that allows access to all functions and global variables by extracting offsets from the PDB☆139May 29, 2025Updated last year
- Example of reading process memory through kernel special APC☆112Apr 21, 2023Updated 3 years ago
- This project can bypass most of the AC except for some perverts that enable VT to monitor page tables☆54May 16, 2024Updated 2 years ago
- ☆48Sep 25, 2024Updated 2 years ago
- A powerful, lightweight PDB (Program Database) viewer tool.☆49Oct 6, 2026Updated last month
- a debugger use vt technology☆376Jun 30, 2022Updated 4 years ago
- A series of methods used to detect kernel shellcode for tencent game safe race 2024☆47Apr 22, 2024Updated 2 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- DWM Overlay without write .text☆141Sep 16, 2024Updated 2 years ago
- ☆319May 11, 2023Updated 3 years ago
- etw hook (syscall/infinity hook) compatible with the latest Windows version of PG☆361Apr 26, 2026Updated 6 months ago
- 🪝 Various EPT hook detection approaches☆163Feb 22, 2026Updated 8 months ago
- dwm overlay through dx11 render pipeline hook for windows 10/11 24h2+☆46Aug 1, 2026Updated 3 months ago
- Hide Process☆74Jul 18, 2024Updated 2 years ago
- A perfect driver for game hack☆127Dec 29, 2025Updated 10 months ago
- 使用 Intel 虚拟化特性实现应用层HOOK☆66Sep 11, 2025Updated last year
- eac memory sig maker☆13Jun 10, 2021Updated 5 years ago
- Proton VPN Special Offer - Get 70% off • AdSpecial partner offer. Trusted by over 100 million users worldwide. Tested, Approved and Recommended by Experts.
- The Universal C++ RunTime library, supporting kernel-mode C++ exception-handler and STL.☆139Jun 6, 2026Updated 5 months ago
- Stealth-focused Intel VT-x hypervisor.☆449Mar 20, 2026Updated 7 months ago
- ☆15Apr 8, 2026Updated 7 months ago
- a monitoring windows driver calls kernel api tools☆142Jul 5, 2024Updated 2 years ago
- ☆22Aug 28, 2024Updated 2 years ago
- an attempt with EPT☆11Jul 8, 2025Updated last year
- [Windows Anti-Rootkit] KSword 5.1 is an source-available Windows toolkit for ARK, kernel debugging, and system forensics. KSword 5.1 是面向…☆634Updated this week
Are these results useful?