Alternatives and similar repositories for WinRing0

Users that are interested in WinRing0 are comparing it to the libraries listed below

• bb107 / RtlWow64
  c++ implementation of windows heavens gate
  ☆70Updated 4 years ago
• A-Normal-User / NtSocket_NtClient_NtServer
  Using NtCreateFile and NtDeviceIoControlFile to realize the function of winsock（利用NtCreateFile和NtDeviceIoControlFile 实现winsock的功能）
  ☆123Updated 3 years ago
• llkbkh / Anti-Rootkit
  ☆53Updated 3 years ago
• windpiaoxue / sc4cpp
  sc4cpp is a shellcode framework based on C++
  ☆95Updated 4 years ago
• IcEy-999 / NDIS_filter_firerwall
  ☆35Updated 3 years ago
• SHA-MRIZ / FsMinfilterHooking
  ☆33Updated 5 years ago
• muxq / hellorpc
  windows rpc 使用MIDL+RPC实现HelloWorld
  ☆23Updated 7 years ago
• cs1ime / DICHook
  Hook NtDeviceIoControlFile with PatchGuard
  ☆107Updated 3 years ago
• singlefreshBird / Rootkit
  Rookit and anti rookit on Windows platform
  ☆14Updated last year
• KNSoft / NTAssassin
  NTAssassin is a fast, small and powerful library helps C/C++ development on Windows
  ☆32Updated last year
• whitephone / Windows-Rootkits
  ☆26Updated 8 years ago
• D0pam1ne705 / Direct-NtCreateUserProcess
  Call NtCreateUserProcess directly as normal.
  ☆75Updated 3 years ago
• nmgwddj / A-Protect
  ☆24Updated 7 years ago
• kouzhudong / libdrv
  Static Library For Windows Drivers
  ☆41Updated 3 weeks ago
• he4rtbleed / PPLL
  Protected Process Light Library
  ☆18Updated 5 years ago
• BeneficialCode / WmipCodeSamples
  What makes it page
  ☆17Updated 3 years ago
• hz86 / peloader
  内存加载DLL 支持X86和X64（Memory PELoader Support X86 and X64）
  ☆40Updated 2 years ago
• TimelifeCzy / WFPDriver
  WFP驱动，关联链路层和进程信息
  ☆16Updated 4 years ago
• mihaly044 / pedigest
  Helper functions for calculating the authenticode digest for a portable executable file
  ☆21Updated 5 years ago
• DragonQuestHero / Kernel-Force-Delete
  force delete runing .exe application file.or delete any locked file
  ☆73Updated 2 years ago
• 0cch / pdbdownloader
  pdb downloader
  ☆29Updated last year
• cbwang505 / windbg-uefi
  这篇文章的目的是介绍一款实验性项目基于COM命名管道或者Windows Hyper-V虚拟机Vmbus通道实现的运行在uefi上的windbg调试引擎开发心得
  ☆44Updated last year
• GoodstudyChina / APC-injection-x86-x64
  ☆74Updated 7 years ago
• kanren3 / minhook-native
  Based on minhook
  ☆34Updated 2 years ago
• SweetIceLolly / Prevent_File_Deletion
  Record & prevent file deletion in kernel mode
  ☆46Updated 5 years ago
• trieck / comexplore
  A Windows C++ OLE/COM Object explorer written in WTL.
  ☆16Updated 10 months ago
• ranni0225 / WRK
  Windows Research Kernel
  ☆37Updated 3 months ago
• bb107 / WinSudo
  Execute commands as local system.
  ☆63Updated 6 years ago
• TheAenema / hm-pe-packer
  A x64 PE Packer/Protector Developed in C++ and VisualStudio
  ☆54Updated 2 years ago
• Rhydon1337 / windows-kernel-process-protector
  Protect a process from code injection, termination and hooking
  ☆49Updated 4 years ago