Alternatives and similar repositories for WinRing0

Users that are interested in WinRing0 are comparing it to the libraries listed below

• bb107 / RtlWow64
  c++ implementation of windows heavens gate
  ☆70Updated 4 years ago
• llkbkh / Anti-Rootkit
  ☆52Updated 2 years ago
• windpiaoxue / sc4cpp
  sc4cpp is a shellcode framework based on C++
  ☆94Updated 4 years ago
• A-Normal-User / NtSocket_NtClient_NtServer
  Using NtCreateFile and NtDeviceIoControlFile to realize the function of winsock（利用NtCreateFile和NtDeviceIoControlFile 实现winsock的功能）
  ☆114Updated 3 years ago
• sonyps5201314 / ntdll
  a ntdll.h head file which download from network, and fix all found problems by me.
  ☆33Updated 11 months ago
• muxq / hellorpc
  windows rpc 使用MIDL+RPC实现HelloWorld
  ☆23Updated 7 years ago
• whitephone / Windows-Rootkits
  ☆26Updated 8 years ago
• IcEy-999 / NDIS_filter_firerwall
  ☆35Updated 3 years ago
• he4rtbleed / PPLL
  Protected Process Light Library
  ☆18Updated 5 years ago
• SHA-MRIZ / FsMinfilterHooking
  ☆33Updated 4 years ago
• cs1ime / DICHook
  Hook NtDeviceIoControlFile with PatchGuard
  ☆107Updated 3 years ago
• D0pam1ne705 / Direct-NtCreateUserProcess
  Call NtCreateUserProcess directly as normal.
  ☆75Updated 3 years ago
• bb107 / WinSudo
  Execute commands as local system.
  ☆61Updated 6 years ago
• DearXiaoGui / InfinityHookPro-main
  ☆53Updated 3 years ago
• SweetIceLolly / Prevent_File_Deletion
  Record & prevent file deletion in kernel mode
  ☆45Updated 5 years ago
• hz86 / peloader
  内存加载DLL 支持X86和X64（Memory PELoader Support X86 and X64）
  ☆39Updated 2 years ago
• Rhydon1337 / windows-kernel-process-protector
  Protect a process from code injection, termination and hooking
  ☆49Updated 4 years ago
• kouzhudong / libdrv
  Static Library For Windows Drivers
  ☆40Updated last week
• baiyfcu / DriverNoImage
  以shellcode注入其它驱动执行，躲避驱动签名检测，曾pubg项目中使用，，，当然现在，，，
  ☆26Updated 3 years ago
• singlefreshBird / Rootkit
  Rookit and anti rookit on Windows platform
  ☆13Updated last year
• sum-catnip / kptnhook
  windows kernelmode driver to inject dll into each and every process and perform systemwide function hooking
  ☆53Updated 3 years ago
• zodiacon / TotalSystem
  View Windows System in action
  ☆39Updated 4 months ago
• je5442804 / CreateProcessInternalW-Full
  Reimplement CreateProcessInternalW via Windows 10 20H1+/Windows 11 Base on NtCreateUserProcess-Post
  ☆75Updated last year
• ntoskrnl7 / ldk
  Load Dll into Kernel space
  ☆38Updated 3 years ago
• mihaly044 / pedigest
  Helper functions for calculating the authenticode digest for a portable executable file
  ☆21Updated 5 years ago
• 0cch / pdbdownloader
  pdb downloader
  ☆29Updated last year
• TheAenema / hm-pe-packer
  A x64 PE Packer/Protector Developed in C++ and VisualStudio
  ☆54Updated 2 years ago
• kanren3 / minhook-native
  Based on minhook
  ☆34Updated 2 years ago
• tdevuser / MalwFinder
  ☆26Updated 6 years ago
• KNSoft / NTAssassin
  NTAssassin is a fast, small and powerful library helps C/C++ development on Windows
  ☆32Updated last year