Hook syscalls from ring0 without triggering PatchGuard
☆24Oct 29, 2025Updated 4 months ago
Alternatives and similar repositories for HalPrivateDispatchTableHook
Users that are interested in HalPrivateDispatchTableHook are comparing it to the libraries listed below
Sorting:
- Interprocess communication via a covert timing channel☆26Oct 24, 2025Updated 4 months ago
- it's a driver injector or driver loader header lib(Windows)☆12Aug 5, 2023Updated 2 years ago
- Windows 32/64-bit Include files and Import Libraries☆16May 26, 2022Updated 3 years ago
- The trashvisor☆12Oct 25, 2020Updated 5 years ago
- ☆12Apr 12, 2024Updated last year
- ☆66May 25, 2023Updated 2 years ago
- Enumerate Callbacks and all Object Types☆16Jan 9, 2023Updated 3 years ago
- Simple Windows update manager with WUA API and Dear ImGui.☆17Sep 26, 2020Updated 5 years ago
- Windows kernel driver that detects hypervisors by probing SIDT/LIDT edge cases, paging/TLB behaviors, privilege transitions, and timing e…☆36Dec 17, 2025Updated 2 months ago
- dbdata.dll emulator for Ubisoft's Denuvo implementation☆73Sep 12, 2025Updated 5 months ago
- An open-source tool for efficiently parsing x64dbg trace files (.trace32 & .trace64).☆41Jan 20, 2026Updated last month
- A Windows Direct Syscall Library☆52Apr 23, 2025Updated 10 months ago
- Kernel ReClassEx☆68Nov 21, 2023Updated 2 years ago
- ☆27Jul 15, 2025Updated 7 months ago
- This program automates the process of finding GNames, FNamePool, GObjects, GWorld, GameStateInit, BeginPlay, StaticLoadObject, SpawnActor…☆39Feb 18, 2023Updated 3 years ago
- POC usermode <=> kernel communication via ALPC.☆72Jun 6, 2024Updated last year
- Binary rewriter for 64-bit PE files.☆100Feb 5, 2024Updated 2 years ago
- DWM overlay without pattern scanning☆69Nov 3, 2025Updated 3 months ago
- Hooking Windows' exception dispatcher to protect process's PML4☆227Jan 24, 2025Updated last year
- ☆27Jan 17, 2026Updated last month
- IDA Map File Symbol Renamer☆24Apr 1, 2025Updated 10 months ago
- sigmaker is a zero-dependency IDA Pro 9.0+ cross-platform signature maker plugin with optional SIMD (e.g. AVX2/NEON/SSE2) speedups that w…☆159Nov 26, 2025Updated 3 months ago
- ☆68Sep 16, 2022Updated 3 years ago
- An advanced singular header-only C++20 obfuscation library with encryption and polymorphism.☆68Updated this week
- ☆27Jan 4, 2024Updated 2 years ago
- A C++ wrapper for icedx86 decoder☆49Jul 28, 2025Updated 7 months ago
- Symbolic Execution based on lifting amd64 to z3☆32Jul 2, 2024Updated last year
- Fast covert timing channel communication for inter-process and inter-processor communication on Windows systems.☆68Nov 15, 2025Updated 3 months ago
- Research-focused hypervisor offering advanced tools for debugging, virtual machine introspection, and automation.☆44Nov 21, 2025Updated 3 months ago
- Harness to issue Virtual Secure Mode (VSM) "secure calls" from VTL 0 to VTL 1☆76Sep 8, 2025Updated 5 months ago
- ☆29Apr 8, 2014Updated 11 years ago
- Monitor ETW events for Windows process mitigation policies, with stack traces☆31Oct 7, 2022Updated 3 years ago
- Standard Kernel Library for Windows manipulation in C++☆199Jun 18, 2025Updated 8 months ago
- Simple IDA Pro plugin to download Unity debug symbols from their symbol server☆85Apr 11, 2024Updated last year
- An example of hooking in CEF-based applications☆42Dec 29, 2024Updated last year
- DSE & PG bypass via BYOVD attack☆76Jul 12, 2025Updated 7 months ago
- Cheat for my own game SecureGame which uses a bootkit to hyperjack Hyper-V in order to access VBS enclave's memory☆103Dec 8, 2024Updated last year
- ☆86Mar 2, 2025Updated 11 months ago
- Use ntdll/ntoskrnl to implement Kernel32, Advapi32 and other APIs. It includes user-mode and kernel-mode.☆96Aug 26, 2025Updated 6 months ago