Alternatives and similar repositories for Patchguard-2023

Users that are interested in Patchguard-2023 are comparing it to the libraries listed below

• xtremegamer1 / vmdevirt-vtil

  View on GitHub
  ☆25Aug 7, 2023Updated 2 years ago
• xu-Wan / HypercallPageHook

  View on GitHub
  POC Hook of nt!HvcallCodeVa
  ☆54May 8, 2023Updated 2 years ago
• gmh5225 / warbird-example

  View on GitHub
  ☆24Jul 15, 2023Updated 2 years ago
• MapleSwan / PageTableHook

  View on GitHub
  ☆144Dec 10, 2022Updated 3 years ago
• 1401199262 / HookSwapContext

  View on GitHub
  ☆34Apr 11, 2023Updated 2 years ago
• MapleSwan / SessionMapper

  View on GitHub
  将驱动映射到会话空间
  ☆38Aug 27, 2022Updated 3 years ago
• 1401199262 / HookHvcallCodeVa

  View on GitHub
  ☆23May 8, 2023Updated 2 years ago
• cs1ime / DICHook

  View on GitHub
  Hook NtDeviceIoControlFile with PatchGuard
  ☆107May 10, 2022Updated 3 years ago
• kouzhudong / InjectDll

  View on GitHub
  Inject dll to process in driver
  ☆10Aug 27, 2024Updated last year
• MapleSwan / enum_real_dirbase

  View on GitHub
  从MmPfnData中枚举进程和页目录基址
  ☆205Aug 18, 2023Updated 2 years ago
• 1401199262 / NMIStackWalk

  View on GitHub
  ☆73Aug 31, 2022Updated 3 years ago
• sreeharshabandi / Captain

  View on GitHub
  Process Creation, Image Load and Thread Creation Notification
  ☆13Sep 15, 2023Updated 2 years ago
• cs1ime / sehcall

  View on GitHub
  Windows X64 mode use seh in manual mapped dll or manual mapped sys
  ☆80Oct 10, 2022Updated 3 years ago
• zer0condition / Demystifying-PatchGuard

  View on GitHub
  Demystifying PatchGuard is a comprehensive analysis of Microsoft's security feature called PatchGuard, which is designed to prevent unaut…
  ☆133Apr 26, 2023Updated 2 years ago
• EBalloon / MapPage

  View on GitHub
  Mapping your code on a 0x1000 size page
  ☆71May 20, 2022Updated 3 years ago
• mathisvickie / EAC-Emulator

  View on GitHub
  Usermode emulation of x64 EAC
  ☆31Apr 30, 2021Updated 4 years ago
• Air14 / KDBGDecryptor

  View on GitHub
  A simple example how to decrypt kernel debugger data block
  ☆31Feb 8, 2021Updated 5 years ago
• amateurVV / AmateurVT

  View on GitHub
  ☆27Jan 4, 2024Updated 2 years ago
• orca-eaa5a / mploader

  View on GitHub
  Portable & Custmizable Windows Defender
  ☆13Nov 10, 2021Updated 4 years ago
• Sentient111 / Csgo-Full-kernel

  View on GitHub
  csgo external running from kernelmode
  ☆107Nov 29, 2022Updated 3 years ago
• Air14 / SmmLoader

  View on GitHub
  Runtime smm module loader
  ☆35Jan 12, 2023Updated 3 years ago
• ThomasonZhao / InfinityHookProMax

  View on GitHub
  InfinityHookProMax: Make InfinityHook great great again
  ☆52Aug 25, 2023Updated 2 years ago
• DragonQuestHero / DwmDraw

  View on GitHub
  不使用3环挂钩进行DWM桌面绘制
  ☆82Dec 9, 2021Updated 4 years ago
• bb107 / ServiceCall

  View on GitHub
  Interprocess communication library, providing the ability to call functions from each other
  ☆20Oct 3, 2019Updated 6 years ago
• yjugl / mitimon

  View on GitHub
  Monitor ETW events for Windows process mitigation policies, with stack traces
  ☆31Oct 7, 2022Updated 3 years ago
• estimated1337 / lenovo_mapper

  View on GitHub
  driver manual mapper powered by https://github.com/estimated1337/lenovo_exec
  ☆115Dec 28, 2022Updated 3 years ago
• EBalloon / Remap

  View on GitHub
  ☆49Feb 21, 2022Updated 3 years ago
• stuxnet147 / Win-Kernel-PiDqSerializationWrite-Example

  View on GitHub
  How to use PiDqSerializationWrite. Introduces how to safely read and write from mapped driver
  ☆26May 29, 2023Updated 2 years ago
• zanpocc / VTFrame

  View on GitHub
  基于Intel-VT技术的windows内核增强型驱动
  ☆30Jun 9, 2022Updated 3 years ago
• SamuelTulach / meme-rw

  View on GitHub
  Archive R/W into any protected process by changing the value of KTHREAD->PreviousMode
  ☆163Jul 31, 2022Updated 3 years ago
• KANKOSHEV / Detect-HiddenThread-via-KPRCB

  View on GitHub
  Detect removed thread from PspCidTable.
  ☆75Mar 18, 2022Updated 3 years ago
• Air14 / SymbolicAccess

  View on GitHub
  Static user/kernel mode library that allows access to all functions and global variables by extracting offsets from the PDB
  ☆117May 29, 2025Updated 8 months ago
• AdamOron / PatchGuardBypass

  View on GitHub
  Bypassing PatchGuard on modern x64 systems
  ☆265Apr 9, 2023Updated 2 years ago
• jonomango / chum

  View on GitHub
  Binary rewriter for 64-bit PE files.
  ☆99Feb 5, 2024Updated 2 years ago
• Protonr0 / AMD-Hypervisor

  View on GitHub
  A basic Secure Virtual Machine hypervisor
  ☆26Feb 25, 2021Updated 4 years ago
• ekknod / efi-monitor

  View on GitHub
  just proof of concept. hooking MmCopyMemory PG safe.
  ☆82Nov 13, 2023Updated 2 years ago
• MmMapIoSpace / UCMapper

  View on GitHub
  Unknowncheats Magically Optimized Tidy Mapper using nvaudio
  ☆150Jun 11, 2024Updated last year
• ZEROWyt / Kernel-driver-eac-be-

  View on GitHub
  Made by scammer so i leak for free ! have fun
  ☆56Feb 26, 2023Updated 2 years ago
• zer0condition / ZeroThreadKernel

  View on GitHub
  Recursive and arbitrary code execution at kernel-level without a system thread creation
  ☆159Apr 13, 2023Updated 2 years ago