Alternatives and similar repositories for Yumekage:

Users that are interested in Yumekage are comparing it to the libraries listed below

• SamuelTulach / memhv
  Minimalistic AMD-V/SVM hypervisor with memory introspection capabilities
  ☆256Updated 2 months ago
• can1357 / hvdetecc
  Collection of hypervisor detections
  ☆236Updated 7 months ago
• VollRagm / PTView
  Browse Page Tables on Windows (Page Table Viewer)
  ☆198Updated 3 years ago
• Oliver-1-1 / SmmInfect
  ☆185Updated this week
• hfiref0x / WubbabooMark
  Debugger Anti-Detection Benchmark
  ☆332Updated last year
• zer0condition / ZeroHVCI
  Achieve arbitrary kernel read/writes/function calling in Hypervisor-Protected Code Integrity (HVCI) protected environments calling withou…
  ☆198Updated 6 months ago
• gmh5225 / CallMeWin32kDriver
  Load your driver like win32k.sys
  ☆252Updated 2 years ago
• VollRagm / lpmapper
  A mapper that maps shellcode into loaded large page drivers
  ☆274Updated 3 years ago
• Oliver-1-1 / GhostMapper
  ☆280Updated 3 weeks ago
• charliewolfe / Stealthy-Kernelmode-Injector
  Manual mapper that uses PTE manipulation, Virtual Address Descriptor (VAD) manipulation, and forceful memory allocation to hide executabl…
  ☆323Updated 3 years ago
• Deputation / instrumentation_callbacks
  A proof of concept demonstrating instrumentation callbacks on Windows 10 21h1 with a TLS variable to ensure all syscalls are caught.
  ☆129Updated 3 years ago
• kkent030315 / anycall
  x64 Windows kernel code execution via user-mode, arbitrary syscall, vulnerable IOCTLs demonstration
  ☆318Updated 2 years ago
• armvirus / CosMapper
  Loads a signed kernel driver which allows you to map any driver to kernel mode without any traces of the signed / mapped driver.
  ☆323Updated 3 years ago
• thesecretclub / callout-poc
  ☆141Updated 4 years ago
• jonomango / nohv
  Kernel driver for detecting Intel VT-x hypervisors.
  ☆184Updated last year
• SamuelTulach / HookGuard
  Hooking Windows' exception dispatcher to protect process's PML4
  ☆167Updated 3 months ago
• SamuelTulach / RwxMeme
  State of the art DLL injector that took 20 minutes to make
  ☆214Updated last year
• waryas / KACE
  Emulate Drivers in RING3 with self context mapping or unicorn
  ☆337Updated 2 years ago
• memN0ps / illusion-rs
  Rusty Hypervisor - Windows UEFI Blue Pill Type-1 Hypervisor in Rust (Codename: Illusion)
  ☆256Updated 8 months ago
• AdamOron / PatchGuardBypass
  Bypassing PatchGuard on modern x64 systems
  ☆258Updated 2 years ago
• ekknod / smm
  alternative smm driver for ryzen motherboards
  ☆144Updated 6 months ago
• BadPlayer555 / KernelGDIDraw
  The program draws with win32k gdi functions in the kernel while NtGdiDdDDISubmitCommand is being hooked.
  ☆287Updated 5 years ago
• Deputation / hygieia
  Hygieia, a vulnerable driver traces scanner written in C++ as an x64 Windows kernel driver.
  ☆143Updated 3 years ago
• 0mWindyBug / GhostMapperUM
  manual map unsigned driver over signed memory
  ☆186Updated last year
• armvirus / SinMapper
  usermode driver mapper that forcefully loads any signed kernel driver (legit cert) with a big enough section (example: .data, .rdata) to …
  ☆418Updated 3 years ago
• ThatLing / limba
  compile-time control flow obfuscation using mba
  ☆182Updated last year
• ch4ncellor / EAC-Reversal
  09/2021 reversal of EasyAntiCheat driver
  ☆215Updated 3 years ago
• connorjaydunn / BinaryShield
  An x86-64 Code Virtualizer
  ☆256Updated 7 months ago
• zer0condition / NVDrv
  Abusing nvidia driver (nvoclock.sys) for physical/virtual memory and control register manipulation.
  ☆257Updated last year
• thesecretclub / SandboxBootkit
  Bootkit for Windows Sandbox to disable DSE/PatchGuard.
  ☆278Updated 6 months ago