Alternatives and similar repositories for VanguardTrace:

Users that are interested in VanguardTrace are comparing it to the libraries listed below

• Oliver-1-1 / DumpDriver
  ☆43Updated 6 months ago
• xu-Wan / HypercallPageHook
  POC Hook of nt!HvcallCodeVa
  ☆50Updated last year
• i32-Sudo / NmiCallbackBlocker
  Kernel Level NMI Callback Blocker
  ☆55Updated 4 months ago
• Oliver-1-1 / EtwKeyboardDetection
  ☆27Updated 3 months ago
• Azvanzed / efi-runner
  A efi-runner and message logger for vmware.
  ☆14Updated 2 months ago
• Sentient111 / ClearDriverTraces
  clearing traces of a loaded driver
  ☆46Updated 2 years ago
• illegal-instruction-co / ThreadIn
  Freeze target threads (external - internal ) by avoiding SuspendThread detections. Or access registers from start address.
  ☆31Updated 9 months ago
• Rythorndoran / SessionMapper
  将驱动映射到会话空间
  ☆34Updated 2 years ago
• rsnrsnrsn / Code-execution-by-abusing-VEH
  Achieving code execution through abusing vectored exception handling
  ☆17Updated last year
• armvirus / fs_driver_loader
  Load driver on boot before anti-cheats
  ☆28Updated 11 months ago
• emlinhax / tableflipper
  partially disable patchguard up to win11 21H2
  ☆18Updated 7 months ago
• ItzPAX / proxyproc
  Header only UM AC "bypass"
  ☆17Updated 8 months ago
• Spuckwaffel / Simple-MmcopyMemory-Hook
  A simple MmCopyMemory hook.
  ☆36Updated 2 years ago
• ekknod / Nmi
  Old way for blocking NMI interrupts
  ☆25Updated 2 years ago
• SiyahS4ncak / S4Mapper
  ☆28Updated last year
• rogxo / DisableDSE
  A method to Disable DSE using .data ptr hooks
  ☆29Updated 11 months ago
• backengineering / VDM
  Library to manipulate drivers that expose a physical memory read/write primitive.
  ☆24Updated last year
• jonomango / superfetch
  Translate virtual addresses to physical addresses from usermode.
  ☆34Updated 7 months ago
• ByteWhite1x1 / Driver-DKOM
  An advanced DKOM for drivers with "DRIVER_OBJECT"
  ☆16Updated last year
• Zpes / pte-protect
  ☆31Updated 2 years ago
• StealthyCheese / File-based-Communication
  communicate with kernel using a image on disk
  ☆15Updated 8 months ago
• Ahora57 / HypervisorCheckR0
  Just check hypervisor in ring0
  ☆14Updated last year
• brew02 / BudgetEPT
  Create stealthy, inline, EPT-like hooks using SMAP and SMEP
  ☆35Updated 3 months ago
• BeneficialCode / KReClassEx
  Kernel ReClassEx
  ☆64Updated last year
• Cesusius / Dse-Patcher
  Patches DSE by swapping both data ptrs located in SeValidateImageHeader && SeValidateImageData
  ☆21Updated 11 months ago
• SamuelTulach / EasyUefi
  Visual Studio template for GNU-EFI
  ☆14Updated 2 years ago