Various novel EPT/NPT hook detection mechanisms.
☆27Mar 20, 2026Updated 7 months ago
Alternatives and similar repositories for Bloodhound
Users that are interested in Bloodhound are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Windows kernel driver that detects hypervisors by probing SIDT/LIDT edge cases, paging/TLB behaviors, privilege transitions, and timing e…☆50Mar 3, 2026Updated 7 months ago
- ☆11Mar 16, 2026Updated 7 months ago
- nmi stackwalking + module verification☆186Dec 28, 2023Updated 2 years ago
- Using the peculiar behaviour of the VPGATHER instructions to determine if an address will fault before it is truly accessed. All done in …☆66Dec 30, 2025Updated 10 months ago
- modern c++ wrapper around the microsoft portable executable file format☆43Nov 22, 2025Updated 11 months ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Hijacking Hyper-V at Runtime with DDMA☆159Aug 13, 2025Updated last year
- Surgical x64 VEH/VCH dumper. Walks the vectored exception handler list, extracts each handler as a standalone PE64 that IDA opens directl…☆20Jul 17, 2026Updated 3 months ago
- ☆29Aug 27, 2025Updated last year
- A template programming library for Kernel Mode Windows drivers.☆13Jul 12, 2016Updated 10 years ago
- Hooking the Windows usermode exception handler☆22Aug 13, 2024Updated 2 years ago
- Kernel anti-cheat for protecting software.☆162Jul 2, 2026Updated 3 months ago
- Kernel Level NMI Callback Blocker☆204Apr 23, 2026Updated 6 months ago
- A kernel exploit leveraging NtUserHardErrorControl to elevate a thread to KernelMode and achieve arbitrary kernel R/W & more.☆60Sep 20, 2022Updated 4 years ago
- Hyperspace is a multi-purpose tool for Emulating, Injecting, Dumping and Externals.☆99Jun 10, 2026Updated 4 months ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- usermode thread hijacking detection via working set page fault monitoring☆43Jul 17, 2026Updated 3 months ago
- Yet another IDA Pro/Home plugin for deobfuscating stack strings☆164Mar 6, 2026Updated 7 months ago
- Usermode NT Explorer - Query kernel addresses, translate virtual to physical addresses, inspect the PFN database, and more.☆92Mar 16, 2026Updated 7 months ago
- ☆22Apr 5, 2026Updated 6 months ago
- cr3 shuffle driver☆100Mar 24, 2024Updated 2 years ago
- ☆22Aug 28, 2024Updated 2 years ago
- Very easy to use pdb parsing library with only one header file，You can use it even if you are a fool.☆13Feb 12, 2026Updated 8 months ago
- AMD Type-2 Hypervisor (Augmented)☆25Feb 23, 2026Updated 8 months ago
- Demonstrates that NvAPI_D3D11_WksReadScanout (undocumented, interface 0xBCB1C536) can read the GPU scanout buffer directly, bypassing any…☆98Mar 8, 2026Updated 7 months ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- Hooking Windows' exception dispatcher to protect process's PML4☆276Jan 24, 2025Updated last year
- A simple C++ driver base with KD data block☆11Jun 25, 2022Updated 4 years ago
- EMACLab (Gamersclub) anticheat analysis☆32Mar 12, 2026Updated 7 months ago
- Undocumented MSVC☆49Nov 10, 2025Updated 11 months ago
- WinDumper is a Windows utility for resolving unexported ntdll.dll functions using portable AOB signatures.☆14Dec 30, 2025Updated 10 months ago
- C++ Assembler with Built-in Mutation Engine☆31Sep 6, 2025Updated last year
- Fast covert timing channel communication for inter-process and inter-processor communication on Windows systems.☆77Mar 24, 2026Updated 7 months ago
- Translate virtual addresses to physical addresses from usermode.☆146Jun 7, 2024Updated 2 years ago
- Stealth-focused Intel VT-x hypervisor (EAC/BE/ACs/AVs).☆440Mar 20, 2026Updated 7 months ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- ☆19Dec 3, 2025Updated 10 months ago
- ☆14Mar 13, 2023Updated 3 years ago
- Use NtSetInformationThread(ThreadBreakOnTermination) for anti-debugging☆16Sep 21, 2019Updated 7 years ago
- ☆44Apr 18, 2023Updated 3 years ago
- Emulate Drivers in RING3 with self context mapping or unicorn☆21Jan 1, 2025Updated last year
- This tool Decrypt and Extract the files from the EAC☆98Feb 17, 2026Updated 8 months ago
- Usermode exploit to bypass any AC using a 0day shatter attack.☆398Nov 26, 2025Updated 11 months ago