Experimental Windows kernel driver PoCs for detecting manually mapped drivers via big pool enumeration, PTE walking, CFG data-pointer hook scanning, and import-stub analysis.
☆22Apr 26, 2026Updated 6 months ago
Alternatives and similar repositories for DetectManualMapDriver
Users that are interested in DetectManualMapDriver are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Windows x64 kernel driver research project focused on driver image remapping(manual mapping), system-call callback hijacking, and user-mo…☆24Sep 4, 2026Updated 2 months ago
- Invisible hook code(support win10 17134 ~ win11 26H1 ) InvisibleHook is an experimental Windows kernel/user-mode research project.☆44Sep 7, 2026Updated 2 months ago
- Windows x64 kernel call stack spoofing research project featuring synthetic stack construction, return address manipulation, and stealth-…☆69Apr 6, 2026Updated 7 months ago
- dwm overlay through dx11 render pipeline hook for windows 10/11 24h2+☆46Aug 1, 2026Updated 3 months ago
- 无痕hook探测☆50Aug 6, 2025Updated last year
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- A powerful, lightweight PDB (Program Database) viewer tool.☆49Oct 6, 2026Updated last month
- DWM Overlay without write .text☆140Sep 16, 2024Updated 2 years ago
- New handle stealing technique for windows apps☆13Oct 6, 2017Updated 9 years ago
- 基于 Intel VT-x 硬件虚拟化技术的原生 Windows 内核调试器☆50Oct 13, 2026Updated 3 weeks ago
- WIP - Type-2 Hypervisor implementation for Intel Processors based on VT-x technology. (Demo)☆23Sep 8, 2026Updated 2 months ago
- 一个windows内核驱动分析框架，对内核所有导出函数进行挂钩监控☆78Nov 19, 2025Updated 11 months ago
- The trashvisor☆12Oct 25, 2020Updated 6 years ago
- Windows 32/64-bit Include files and Import Libraries☆16May 26, 2022Updated 4 years ago
- ☆21Apr 20, 2025Updated last year
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- ☆82Sep 16, 2022Updated 4 years ago
- ☆17Jan 9, 2023Updated 3 years ago
- ☆40Mar 23, 2023Updated 3 years ago
- Detection for every software TPM, TPM passthrough, TPM proxying, EDS/EK/PCR spoofing, and VMs☆45Oct 22, 2026Updated 2 weeks ago
- Dll injector POC for new handle stealing technique☆21Oct 8, 2017Updated 9 years ago
- Debugger utilizing stealth hooks to hide from debugger detection☆28Aug 22, 2026Updated 2 months ago
- Windows kernel-mode reboot-restore driver — NTFS volume filter with copy-on-write redirection☆68Jun 11, 2026Updated 4 months ago
- Monitor ETW events for Windows process mitigation policies, with stack traces☆30Oct 7, 2022Updated 4 years ago
- ☆55Apr 23, 2026Updated 6 months ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Hook syscalls from ring0 without triggering PatchGuard☆33Oct 29, 2025Updated last year
- kernel overlay using no hooks to be added to your cheat driver. supports amd/nvidia/intel☆23Nov 23, 2024Updated last year
- PoC for AMD Ryzen driver.☆20Jan 12, 2026Updated 9 months ago
- Hijacking Hyper-V at Runtime with DDMA☆161Aug 13, 2025Updated last year
- 解决梦幻西游图色脚本鼠标移动有偏差☆13Apr 12, 2026Updated 6 months ago
- （communication detected）a kernel driver for game cheater. includes read&write memory / key&mouse simulator / kernel DWM render / process …☆125May 9, 2025Updated last year
- R3劫持所有异常☆14Jan 4, 2021Updated 5 years ago
- Lightweight, dependency-free x86-64 CPU emulation library with Unicorn-like guest mode and direct host-memory execution.☆240May 11, 2026Updated 5 months ago
- create a um process that contains all physical memory☆21Jun 12, 2026Updated 4 months ago
- End-to-end encrypted email - Proton Mail • AdSpecial offer: 40% Off Yearly / 80% Off First Month. All Proton services are open source and independently audited for security.
- 三角洲行动热能+范围☆40Oct 2, 2026Updated last month
- Windows kernel framework for legitimate backed memory injection into kernel and user mode.☆49Jun 13, 2026Updated 4 months ago
- Counter-Strike: 2 Offset Dumper☆14Oct 6, 2026Updated last month
- Simple Intel VT-x hypervisor☆376Dec 10, 2023Updated 2 years ago
- 基于npt-hook的amd平 台调试体系重建工具☆136Sep 4, 2026Updated 2 months ago
- Reverse Engineering☆14Jun 22, 2017Updated 9 years ago
- A tool to inject Frida Gadget into APK files and deploy them to non-root Android devices.☆20Jun 9, 2026Updated 4 months ago