Alternatives and similar repositories for llvm-msvc

Users that are interested in llvm-msvc are comparing it to the libraries listed below

• annihilatorq / shadow_syscall
  windows syscalls with a single line and a high level of abstraction. has modern cpp20 wrappers and utilities, range-based DLL and export …
  ☆182Updated 2 weeks ago
• waryas / KACE
  Emulate Drivers in RING3 with self context mapping or unicorn
  ☆341Updated 2 years ago
• SamuelTulach / memhv
  Minimalistic AMD-V/SVM hypervisor with memory introspection capabilities
  ☆280Updated 3 months ago
• cutecatsandvirtualmachines / SKLib
  Standard Kernel Library for Windows manipulation in C++
  ☆164Updated this week
• Xyrem / Yumekage
  Demo proof of concept for shadow regions, and implementation of HyperDeceit.
  ☆280Updated 2 years ago
• weak1337 / NO_ACCESS_Protection
  ☆181Updated 3 years ago
• NewWorldComingSoon / llvm-msvc-build
  This project migrated to https://github.com/backengineering/llvm-msvc
  ☆143Updated last year
• rogxo / ReadPhys
  r/w virtual memory without attach
  ☆181Updated last year
• BadPlayer555 / KernelGDIDraw
  The program draws with win32k gdi functions in the kernel while NtGdiDdDDISubmitCommand is being hooked.
  ☆302Updated 5 years ago
• adrianyy / kernelhook
  Windows inline hooking tool.
  ☆273Updated 6 years ago
• Chemiculs / qengine
  C++ 17 or higher control flow obfuscation library for windows binaries
  ☆365Updated last month
• connorjaydunn / BinaryShield
  An x86-64 Code Virtualizer
  ☆267Updated 8 months ago
• Kwansy98 / EasyPdb
  A very simple C++ library for download pdb, get rva of function, global variable and offset from struct.
  ☆144Updated last year
• kkent030315 / anycall
  x64 Windows kernel code execution via user-mode, arbitrary syscall, vulnerable IOCTLs demonstration
  ☆330Updated 2 years ago
• charliewolfe / Stealthy-Kernelmode-Injector
  Manual mapper that uses PTE manipulation, Virtual Address Descriptor (VAD) manipulation, and forceful memory allocation to hide executabl…
  ☆332Updated 3 years ago
• can1357 / hvdetecc
  Collection of hypervisor detections
  ☆239Updated 8 months ago
• Oxygen1a1 / oxgenPdb
  a Windows kernel Pdb parsing and downloading library that running purely in kernel mode without any R3 programs.
  ☆154Updated 9 months ago
• jonomango / nohv
  Kernel driver for detecting Intel VT-x hypervisors.
  ☆188Updated last year
• hfiref0x / WubbabooMark
  Debugger Anti-Detection Benchmark
  ☆334Updated last year
• ch4ncellor / EAC-Reversal
  09/2021 reversal of EasyAntiCheat driver
  ☆219Updated 3 years ago
• SamuelTulach / LightHook
  Single-header, minimalistic, cross-platform hook library written in pure C
  ☆328Updated 8 months ago
• zouxianyu / query-pdb
  query-pdb is a server-side software for parsing PDB files. The software provides PDB online parsing service.
  ☆154Updated 9 months ago
• 1401199262 / Hook-KdTrap
  ☆208Updated 2 years ago
• notpidgey / EagleVM
  Native code virtualizer for x64 binaries
  ☆486Updated 6 months ago
• VollRagm / lpmapper
  A mapper that maps shellcode into loaded large page drivers
  ☆283Updated 3 years ago
• MiroKaku / Musa.Runtime
  The Universal C++ RunTime library, supporting kernel-mode C++ exception-handler and STL.
  ☆100Updated 3 weeks ago
• MiroKaku / DetoursX
  Kernel-Mode extended version of https://github.com/microsoft/Detours
  ☆167Updated 3 weeks ago
• HoShiMin / Sig
  The most powerful and customizable binary pattern scanner
  ☆238Updated 3 years ago
• Oliver-1-1 / SmmInfect
  ☆210Updated last week
• MapleSwan / enum_real_dirbase
  从MmPfnData中枚举进程和页目录基址
  ☆178Updated last year