Alternatives and similar repositories for EasyAntiPatchGuard:

Users that are interested in EasyAntiPatchGuard are comparing it to the libraries listed below

• 1401199262 / MemoryVirtualization
  ☆162Updated 3 years ago
• zouxianyu / KernelHiddenExecute
  Hide codes/data in the kernel address space.
  ☆188Updated 3 years ago
• KANKOSHEV / Detect-KeAttachProcess
  Detect-KeAttachProcess by iterating through all processes as well as checking the context of the thread.
  ☆112Updated 3 years ago
• 1401199262 / Hook-KdTrap
  ☆198Updated 2 years ago
• SDXT / MMInject
  Kernel DLL Injector using NX Bit Swapping and VAD hide for hiding injected DLL
  ☆210Updated 4 years ago
• adrianyy / KeInject
  Kernel LdrLoadDll injector
  ☆258Updated 6 years ago
• Deputation / pagewalkr
  An x64 page table iterator written in C++ as a kernel mode windows driver.
  ☆108Updated 3 years ago
• not-wlan / driver-hijack
  ☆153Updated 5 years ago
• Oxygen1a1 / oxgenPdb
  a Windows kernel Pdb parsing and downloading library that running purely in kernel mode without any R3 programs.
  ☆152Updated 6 months ago
• lennyRBLX / readwrite-kernel-stable
  a more stable & secure read/write virtual memory for kernel mode drivers
  ☆164Updated 5 years ago
• rogxo / ReadPhys
  r/w virtual memory without attach
  ☆167Updated last year
• Air14 / airhv
  Simple Intel VT-x hypervisor
  ☆294Updated last year
• BadPlayer555 / KernelGDIDraw
  The program draws with win32k gdi functions in the kernel while NtGdiDdDDISubmitCommand is being hooked.
  ☆284Updated 4 years ago
• kkent030315 / anymapper
  x64 Windows kernel driver mapper, inject unsigned driver using anycall
  ☆143Updated last year
• weak1337 / NO_ACCESS_Protection
  ☆177Updated 3 years ago
• kkent030315 / anycall
  x64 Windows kernel code execution via user-mode, arbitrary syscall, vulnerable IOCTLs demonstration
  ☆302Updated 2 years ago
• crtdll / bedaisy-reversal
  Some psuedo snippets from BattlEye's BEDaisy.sys loaded on Rainbow Six: Siege.
  ☆123Updated 2 years ago
• KelvinMsft / ThreadSpy
  ☆157Updated 4 years ago
• NewWorldComingSoon / llvm-msvc-build
  This project migrated to https://github.com/backengineering/llvm-msvc
  ☆140Updated last year
• cutecatsandvirtualmachines / SKLib
  Standard Kernel Library for Windows hacking in C++
  ☆135Updated 4 months ago
• huoji120 / MakeInfinityHookGreatAgain
  让Etwhook再次伟大! Make InfinityHook Great Again!
  ☆134Updated 3 years ago
• rogerxiii / kernel-codecave-poc
  Proof of concept on how to bypass some limitations of a manual mapped driver
  ☆168Updated 4 years ago
• VollRagm / lpmapper
  A mapper that maps shellcode into loaded large page drivers
  ☆262Updated 2 years ago
• fIappy / infhook19041
  ☆123Updated 4 years ago
• not-wlan / instrumentation-callbacks
  based on https://github.com/secrary/Hooking-via-InstrumentationCallback
  ☆69Updated 5 years ago
• zhuhuibeishadiao / PFHook
  Page fault hook use ept (Intel Virtualization Technology)
  ☆183Updated 8 years ago
• MiroKaku / libwsk
  The Kernel-Mode Winsock library, supporting TCP, UDP and Unix sockets (DGRAM and STREAM).
  ☆245Updated 2 months ago
• 1401199262 / RemoteCall
  ☆178Updated last year
• Rythorndoran / enum_real_dirbase
  从MmPfnData中枚举进程和页目录基址
  ☆160Updated last year
• hypervisor / kli
  Kernel Lazy Importer
  ☆109Updated 11 months ago