Alternatives and similar repositories for WinRing0:

Users that are interested in WinRing0 are comparing it to the libraries listed below

• cs1ime / DICHook
  Hook NtDeviceIoControlFile with PatchGuard
  ☆103Updated 2 years ago
• IcEy-999 / NDIS_filter_firerwall
  ☆34Updated 2 years ago
• SHA-MRIZ / FsMinfilterHooking
  ☆30Updated 4 years ago
• llkbkh / Anti-Rootkit
  ☆47Updated 2 years ago
• he4rtbleed / PPLL
  Protected Process Light Library
  ☆18Updated 4 years ago
• bb107 / RtlWow64
  c++ implementation of windows heavens gate
  ☆68Updated 4 years ago
• kouzhudong / libdrv
  Static Library For Windows Drivers
  ☆33Updated this week
• tdevuser / MalwFinder
  ☆26Updated 5 years ago
• muxq / hellorpc
  windows rpc 使用MIDL+RPC实现HelloWorld
  ☆22Updated 6 years ago
• whitephone / Windows-Rootkits
  ☆26Updated 7 years ago
• Oxygen1a1 / InfinityHookClass
  EtwHook for win7-win11;
  ☆22Updated 2 years ago
• windpiaoxue / sc4cpp
  sc4cpp is a shellcode framework based on C++
  ☆88Updated 3 years ago
• ranni0225 / WRK
  Windows Research Kernel VS2022 Solution
  ☆28Updated 5 months ago
• jseclab / UGuardMap
  bootkit驱动映射，三环进程注入加载指定模块
  ☆13Updated 4 months ago
• SweetIceLolly / Prevent_File_Deletion
  Record & prevent file deletion in kernel mode
  ☆42Updated 4 years ago
• MiroKaku / Learning-Example
  For Example. See Miro's Blog
  ☆30Updated 2 years ago
• BeneficialCode / WmipCodeSamples
  What makes it page
  ☆17Updated 2 years ago
• ch3rn0byl / CVE-2021-21551
  ☆26Updated 3 years ago
• TimelifeCzy / kHypervisorBasic
  VT Hook
  ☆46Updated 7 months ago
• alfarom256 / UserVAtoPhysical
  Walks the Process' VAD list to grab the PTE's corresponding to a usermode virtual address, all to get the physical address
  ☆24Updated 3 years ago
• ntoskrnl7 / ldk
  Load Dll into Kernel space
  ☆38Updated 2 years ago
• gmh5225 / warbird-example
  ☆18Updated last year
• DearXiaoGui / InfinityHookPro-main
  ☆53Updated 2 years ago
• zhuhuibeishadiao / WskHttp
  Windows kernel drivers simple HTTP library for modern C++
  ☆42Updated 6 years ago
• D0pam1ne705 / Direct-NtCreateUserProcess
  Call NtCreateUserProcess directly as normal.
  ☆68Updated 2 years ago
• mmmmmon / KernelCjson
  The modifyed cjson that can running on windows kernel
  ☆14Updated last year
• amateurVV / AmateurVT
  ☆27Updated last year
• A-Normal-User / NtSocket_NtClient_NtServer
  Using NtCreateFile and NtDeviceIoControlFile to realize the function of winsock（利用NtCreateFile和NtDeviceIoControlFile 实现winsock的功能）
  ☆107Updated 2 years ago
• 1401199262 / InstrumentationCallback
  ☆27Updated 2 years ago
• hz86 / peloader
  内存加载DLL 支持X86和X64（Memory PELoader Support X86 and X64）
  ☆31Updated last year