Alternatives and similar repositories for WindowsKernelPrograming

Users that are interested in WindowsKernelPrograming are comparing it to the libraries listed below

• windpiaoxue / sc4cpp
  sc4cpp is a shellcode framework based on C++
  ☆92Updated 4 years ago
• 0xTalShang / WindowsKernel
  windwos内核研究与驱动Code
  ☆66Updated 3 years ago
• huoji120 / Etw-Syscall
  https://key08.com/index.php/2021/10/19/1375.html
  ☆71Updated 3 years ago
• TimelifeCzy / HIPS-HIDS_CveMod
  Windows CVE主防(HIPS/HIDS)
  ☆56Updated 4 years ago
• Cc28256 / ObfuscateP
  编译时混淆字符串，以确保生成的二进制PE不会暴漏明文字符串。（C++ 14 及以上）
  ☆27Updated 4 years ago
• hz86 / peloader
  内存加载DLL 支持X86和X64（Memory PELoader Support X86 and X64）
  ☆37Updated 2 years ago
• WINGS2709 / 360Safe
  大数字驱动逆向代码
  ☆74Updated last year
• D0pam1ne705 / Direct-NtCreateUserProcess
  Call NtCreateUserProcess directly as normal.
  ☆75Updated 3 years ago
• supermanc88 / Document
  windows驱动开发、linux编程等
  ☆61Updated 4 years ago
• A-Normal-User / Pretend_HideVirtualMemory
  利用物理内存映射，实现虚拟内存的伪隐藏
  ☆83Updated 3 years ago
• wanttobeno / SunDaySearchSignCode
  基于sunday算法的内存快速搜索，搜索2GB内存只需1秒
  ☆74Updated 5 years ago
• y11en / PEBFake
  PEBFake(修改PEB 伪装当前进程路径、参数等)
  ☆53Updated 4 years ago
• huoji120 / numen
  简单安排一下 autochk.sys 这个rootkit
  ☆72Updated 2 years ago
• muxq / hellorpc
  windows rpc 使用MIDL+RPC实现HelloWorld
  ☆23Updated 7 years ago
• huoji120 / Heuristic_antivirus_engine_by_huoji
  基于UC的启发式杀毒引擎[还没做完]
  ☆35Updated 4 years ago
• haidragon / ReflectiveInjection
  反射式注入
  ☆29Updated 6 years ago
• wanttobeno / Win64DriverStudy_Src
  WIN64驱动编程基础教程-源码 作者：胡文亮
  ☆89Updated 7 years ago
• jash-git / Windows-Hack-Programming-backup
  WINDOWS黑客編程技術詳解 [Windows-Hack-Programming backup]
  ☆46Updated 6 years ago
• satadriver / myLittleBear
  myLittleBear
  ☆56Updated 3 months ago
• namjkee / ssdt.Recover.21yu3
  绕过卡巴斯基主动防御,加载驱动，unhook所有ssdt hook及shadow ssdt hook
  ☆38Updated 10 years ago
• huoji120 / DuckSandboxDetect
  沙箱测试,测评国内常见沙箱的代码与结论
  ☆103Updated 4 years ago
• grace2017 / SecondProcess
  过TP驱动
  ☆28Updated 5 years ago
• threatexpert / atrk-win
  针对windows rootkit的一些检测，分别从进程、端口、文件这三个方面进行检测。
  ☆20Updated 9 months ago
• Whitebird0 / Windows-kernel-learning-notes
  ☆17Updated 3 years ago
• psbazx / PE_shell
  简单的二进制加密壳
  ☆13Updated 5 years ago
• bopin2020 / WindowsCamp
  Windows Kernel Knowledge && Collect Resources on the wire && Nothing innovation by myself &&
  ☆58Updated last week
• BeneficialCode / KPPL
  Kill Protected Process Light Process (include av)
  ☆58Updated 2 years ago
• skrandy / ProtectYourProcess
  保护进程
  ☆23Updated 2 years ago
• kouzhudong / AntiHook
  Enum and Remove Hook in Windows
  ☆42Updated last week
• Gilfoylex / windows_hack_teach
  windows 黑客技术编程技术详解配套的代码资源
  ☆16Updated 5 years ago