Alternatives and similar repositories for UserVAtoPhysical

Users that are interested in UserVAtoPhysical are comparing it to the libraries listed below

• Sentient111 / ClearDriverTraces

  View on GitHub
  clearing traces of a loaded driver
  ☆47Jul 2, 2022Updated 3 years ago
• Deputation / syscall_extractor

  View on GitHub
  A C++ syscall ID extractor for Windows. Developed, debugged and tested on 20H2.
  ☆21May 25, 2021Updated 4 years ago
• blaquee / APCHook

  View on GitHub
  hooking KiUserApcDispatcher
  ☆25Apr 3, 2017Updated 8 years ago
• helloobaby / Nmi-Callback

  View on GitHub
  detect hypervisor with Nmi Callback
  ☆42Sep 25, 2022Updated 3 years ago
• chkpizza / runtime

  View on GitHub
  VEH Redirect & VEH Debugger
  ☆23May 18, 2020Updated 5 years ago
• ByteWhite1x1 / PatchGuardResearch

  View on GitHub
  Bypassing kernel patch protection runtime
  ☆21Feb 19, 2023Updated 2 years ago
• kkent030315 / anyvtop

  View on GitHub
  x64 Windows implementation of virtual-address to physical-address translation
  ☆46Jun 3, 2021Updated 4 years ago
• Zero-Tang / SimpleWhpDemo

  View on GitHub
  Simple Demo of using Windows Hypervisor Platform
  ☆29Jul 14, 2025Updated 7 months ago
• luciouskami / shadowMap

  View on GitHub
  bypass CRC
  ☆12May 3, 2018Updated 7 years ago
• qq1045551070 / IoCommon

  View on GitHub
  IO隐藏通信封装
  ☆17May 31, 2021Updated 4 years ago
• gabriellandau / CISpotter

  View on GitHub
  Code Integrity Violation Spotter
  ☆17Jun 11, 2024Updated last year
• boom-cr3 / NotifyRoutineHijackThread

  View on GitHub
  Hijack NotifyRoutine for a kernelmode thread
  ☆41Jun 4, 2022Updated 3 years ago
• rad9800 / VehApiResolve

  View on GitHub
  ☆118Aug 7, 2022Updated 3 years ago
• klezVirus / DCKFinder

  View on GitHub
  Dangling COM Keys Finder
  ☆17Nov 16, 2021Updated 4 years ago
• therealdreg / cgaty

  View on GitHub
  Hooking the GDT - Installing a Call Gate. POC for Rootkit Arsenal Book Second Edition (version 2022)
  ☆73Aug 11, 2023Updated 2 years ago
• alfarom256 / drivers_and_shit

  View on GitHub
  ☆59Jun 8, 2022Updated 3 years ago
• waleedassar / ALPC_CLIENT_SERVER

  View on GitHub
  Demo to show how write ALPC Client & Server using native Ntdll.dll syscalls.
  ☆21Jan 25, 2022Updated 4 years ago
• crvvdev / intraceptor

  View on GitHub
  Intraceptor intercept Windows NT API calls and redirect them to a kernel driver to bypass process/threads handle protections.
  ☆32May 18, 2022Updated 3 years ago
• bananabr / Givemeahand

  View on GitHub
  A PoC tool for exploiting leaked process and thread handles
  ☆32Feb 13, 2024Updated 2 years ago
• KiFilterFiberContext / BadlionLogger

  View on GitHub
  kernel driver used to monitor the activity of BadlionAnticheat.sys by patching its IAT
  ☆33Jul 9, 2021Updated 4 years ago
• kkent030315 / libinject

  View on GitHub
  A dll injector static library for Win x64 processes with handle elevation supported
  ☆12Mar 28, 2021Updated 4 years ago
• SHA-MRIZ / FsMinfilterHooking

  View on GitHub
  ☆33Dec 22, 2020Updated 5 years ago
• HyperSine / siren-hypervisor

  View on GitHub
  ☆39Mar 23, 2023Updated 2 years ago
• huoji120 / Etw-Syscall

  View on GitHub
  https://key08.com/index.php/2021/10/19/1375.html
  ☆71May 11, 2022Updated 3 years ago
• hugsy / modern-cpp-windows-driver-template

  View on GitHub
  Windows driver template, using C++20 & cmake & GithubActions
  ☆24Aug 9, 2024Updated last year
• bytewreck / hook-buster

  View on GitHub
  Proof-of-Concept software for detecting AV/EDR hooks in Windows libraries.
  ☆36May 12, 2022Updated 3 years ago
• dilibili / Hook_KiUserExceptionDispatcher

  View on GitHub
  R3劫持所有异常
  ☆15Jan 4, 2021Updated 5 years ago
• KANKOSHEV / Detect-MouseClassServiceCallback

  View on GitHub
  mouseclassservicecallback detection via hook
  ☆52Feb 7, 2022Updated 4 years ago
• lennyRBLX / manual_exception_handling

  View on GitHub
  Handling C++ & __try exceptions without the need of built-in handlers.
  ☆77Aug 28, 2021Updated 4 years ago
• mzakocs / CVE-2021-21551-POC

  View on GitHub
  An extended proof-of-concept for the CVE-2021-21551 Dell ‘dbutil_2_3.sys’ Kernel Exploit
  ☆24Jul 20, 2021Updated 4 years ago
• joe-desimone / patriot

  View on GitHub
  ☆153Jul 31, 2022Updated 3 years ago
• tpn / windows-nt-file-system-internals-book

  View on GitHub
  Source code on the 1.44MB 3.5 floppy accompanying the Windows NT File System Internals book.
  ☆20Jul 31, 2019Updated 6 years ago
• APTortellini / DoH-Stager

  View on GitHub
  ☆14Nov 29, 2021Updated 4 years ago
• EspressoCake / DLL_Version_Enumeration_BOF

  View on GitHub
  A BOF for enumerating version information for DLLs associated for a Beacon process.
  ☆16Nov 23, 2021Updated 4 years ago
• BeneficialCode / WmipCodeSamples

  View on GitHub
  What makes it page
  ☆17Aug 24, 2022Updated 3 years ago
• muturikaranja / kernel-windowless-wndproc-hook

  View on GitHub
  hooks gServerHandlers xxxEventWndProc
  ☆13May 1, 2022Updated 3 years ago
• Peribunt / Exception-Ret-Spoofing

  View on GitHub
  A simple way to spoof return addresses using an exception handler
  ☆43Aug 3, 2022Updated 3 years ago
• AzureGreen / ArkToolDrv

  View on GitHub
  An ark tool's driver
  ☆40May 11, 2017Updated 8 years ago
• SDXT / MMInject

  View on GitHub
  Kernel DLL Injector using NX Bit Swapping and VAD hide for hiding injected DLL
  ☆220Nov 12, 2020Updated 5 years ago