alal4465 / KernelMonLinks
A ProcMon-esque tool for monitoring Windows Kernel Drivers
☆58Updated 4 years ago
Alternatives and similar repositories for KernelMon
Users that are interested in KernelMon are comparing it to the libraries listed below
Sorting:
- first commit☆62Updated 4 years ago
- ☆98Updated 8 years ago
- Ghetto user mode emulation of Windows kernel drivers.☆149Updated last year
- a simple intel vt code both support x86 & x64. PatchGuard monitor.☆76Updated 4 years ago
- This project migrated to https://github.com/backengineering/llvm-msvc☆84Updated 2 years ago
- A basic 100 loc CPU emulator using the existing code of ntoskrnl.exe☆72Updated 2 years ago
- ☆125Updated 5 years ago
- x64 syscall caller in C++.☆92Updated 7 years ago
- fix vmprotect import function used unicorn-engine.☆97Updated 2 years ago
- Experimental disassembler for x86 binaries virtualized by VMProtect 3☆97Updated 3 years ago
- ☆51Updated 4 years ago
- An example of a client and server using Windows' ALPC functions to send and receive data.☆107Updated 9 months ago
- Kernel ReClassEx☆64Updated last year
- This is the P.O.C source for hooking the system calls on Windows 10 (1903) using it's dynamic trace feature weakness☆53Updated 6 years ago
- Collect different versions of Crucial modules.☆144Updated last year
- Example Windows Kernel-mode Driver which enumerates running processes.☆58Updated 3 years ago
- too busy for that all, furikuri is framework for code protection☆161Updated 5 years ago
- Collect various versions of ntoskrnl files☆57Updated last year
- windows kernel pagehook☆40Updated 2 years ago
- Tutorial & a blog post that demonstrate how to code a Windows driver to inject a custom DLL into all running processes. I coded it from s…☆136Updated 4 years ago
- A general solution to simulate execution of virtualized instructions (vmprotect/themida, etc.).☆74Updated 3 years ago
- Use ci.dll API for validating Authenticode signature of files☆158Updated 3 years ago
- ☆139Updated 2 years ago
- C++ library for parsing and manipulating PE files statically and dynamically.☆88Updated 2 years ago
- Handling C++ & __try exceptions without the need of built-in handlers.☆73Updated 4 years ago
- windows kernelmode driver to inject dll into each and every process and perform systemwide function hooking☆53Updated 3 years ago
- Kernel-Mode extended version of https://github.com/microsoft/Detours☆175Updated 4 months ago
- PE-Dump-Fixer☆111Updated 5 years ago
- Visual Studio Project example for using Microsoft's STL in WDM (Windows Kernel-mode Driver)☆25Updated 4 years ago
- Binary rewriter for 64-bit PE files.☆85Updated last year