Alternatives and similar repositories for WinRing0

Users that are interested in WinRing0 are comparing it to the libraries listed below

• bb107 / RtlWow64
  c++ implementation of windows heavens gate
  ☆70Updated 4 years ago
• A-Normal-User / NtSocket_NtClient_NtServer
  Using NtCreateFile and NtDeviceIoControlFile to realize the function of winsock（利用NtCreateFile和NtDeviceIoControlFile 实现winsock的功能）
  ☆114Updated 3 years ago
• llkbkh / Anti-Rootkit
  ☆52Updated 2 years ago
• hz86 / peloader
  内存加载DLL 支持X86和X64（Memory PELoader Support X86 and X64）
  ☆39Updated 2 years ago
• IcEy-999 / NDIS_filter_firerwall
  ☆35Updated 3 years ago
• windpiaoxue / sc4cpp
  sc4cpp is a shellcode framework based on C++
  ☆94Updated 4 years ago
• whitephone / Windows-Rootkits
  ☆26Updated 8 years ago
• muxq / hellorpc
  windows rpc 使用MIDL+RPC实现HelloWorld
  ☆23Updated 7 years ago
• kouzhudong / libdrv
  Static Library For Windows Drivers
  ☆40Updated this week
• he4rtbleed / PPLL
  Protected Process Light Library
  ☆18Updated 5 years ago
• SHA-MRIZ / FsMinfilterHooking
  ☆33Updated 4 years ago
• TheAenema / hm-pe-packer
  A x64 PE Packer/Protector Developed in C++ and VisualStudio
  ☆54Updated 2 years ago
• cs1ime / DICHook
  Hook NtDeviceIoControlFile with PatchGuard
  ☆107Updated 3 years ago
• HARM4Y / Minifilter
  参考《Windows内核安全与驱动开发》的透明加密解密Minifilter
  ☆74Updated 3 years ago
• D0pam1ne705 / Direct-NtCreateUserProcess
  Call NtCreateUserProcess directly as normal.
  ☆75Updated 3 years ago
• DragonQuestHero / Kernel-Force-Delete
  force delete runing .exe application file.or delete any locked file
  ☆72Updated 2 years ago
• TimelifeCzy / WFPDriver
  WFP驱动，关联链路层和进程信息
  ☆16Updated 4 years ago
• zodiacon / WinSys
  C++ library for low-level Windows development
  ☆81Updated last year
• sonyps5201314 / ntdll
  a ntdll.h head file which download from network, and fix all found problems by me.
  ☆33Updated 11 months ago
• SweetIceLolly / Prevent_File_Deletion
  Record & prevent file deletion in kernel mode
  ☆45Updated 5 years ago
• singlefreshBird / Rootkit
  Rookit and anti rookit on Windows platform
  ☆13Updated last year
• BeneficialCode / WmipCodeSamples
  What makes it page
  ☆17Updated 3 years ago
• wanttobeno / Win64DriverStudy_Src
  WIN64驱动编程基础教程-源码 作者：胡文亮
  ☆90Updated 7 years ago
• KNSoft / NTAssassin
  NTAssassin is a fast, small and powerful library helps C/C++ development on Windows
  ☆32Updated last year
• cbwang505 / windbg-uefi
  这篇文章的目的是介绍一款实验性项目基于COM命名管道或者Windows Hyper-V虚拟机Vmbus通道实现的运行在uefi上的windbg调试引擎开发心得
  ☆44Updated last year
• mihaly044 / pedigest
  Helper functions for calculating the authenticode digest for a portable executable file
  ☆21Updated 5 years ago
• zodiacon / TotalSystem
  View Windows System in action
  ☆40Updated 4 months ago
• ranni0225 / WRK
  Windows Research Kernel
  ☆37Updated 2 months ago
• bb107 / WinSudo
  Execute commands as local system.
  ☆62Updated 6 years ago
• send010 / SymbolTypeViewer_HanHua
  SymbolTypeViewer_汉化
  ☆17Updated 5 years ago