☆98Jun 3, 2024Updated 2 years ago
Alternatives and similar repositories for user-kernel-syscall-hook
Users that are interested in user-kernel-syscall-hook are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- ☆21May 30, 2024Updated 2 years ago
- intel vt-x type 2 hypervisor☆69Apr 13, 2025Updated last year
- Create stealthy, inline, EPT-like hooks using SMAP and SMEP☆69Oct 19, 2024Updated 2 years ago
- detect hypervisor with Nmi Callback☆42Sep 25, 2022Updated 4 years ago
- ☆16May 2, 2024Updated 2 years ago
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- Rust library for lifting raw binary data to LLVM IR☆68Jul 8, 2026Updated 3 months ago
- Native code virtualizer for x64 binaries☆547Dec 20, 2024Updated last year
- Find out how to bypass HVCI (or not). My own research on Microsoft Warbird (specifically in clipsp.sys)☆105Oct 26, 2025Updated last year
- x86-64 code/pe virtualizer☆215Dec 2, 2024Updated last year
- A basic implementation of Patch Guard that I implemented, that includes integrity checks and other protection mechanisms I added.☆79Sep 26, 2026Updated last month
- Windows kernel driver that detects hypervisors by probing SIDT/LIDT edge cases, paging/TLB behaviors, privilege transitions, and timing e…☆50Mar 3, 2026Updated 8 months ago
- a parser for the .map file included in the aimware leak☆18Feb 19, 2023Updated 3 years ago
- A project on the Unicorn emulator to emulate the code of Pe files in windows☆27Sep 12, 2024Updated 2 years ago
- Windows 10 DLL Injector via Driver utilizing VAD and hiding the loaded driver☆54Oct 19, 2023Updated 3 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Windows kernel driver and usermode app emulator for x86-64 and ARM64 targets.☆191Updated this week
- Bootkit for Windows Sandbox to disable DSE/PatchGuard.☆353Oct 13, 2024Updated 2 years ago
- POC Hook of nt!HvcallCodeVa☆54May 8, 2023Updated 3 years ago
- A parser for Microsoft PDB (Program Database) debugging information☆25Nov 5, 2024Updated last year
- My research WIP bluepill hypervisor☆40Mar 15, 2023Updated 3 years ago
- Header only library for binding, reordering and currying of function arguments without cost☆17Jun 20, 2018Updated 8 years ago
- Provides commands to read from and write to arbitrary kernel-mode memory for users with the Administrator privilege. HVCI compatible. No …☆25Jun 16, 2024Updated 2 years ago
- ☆109Oct 25, 2025Updated last year
- Admin to Kernel code execution using the KSecDD driver☆278Apr 19, 2024Updated 2 years ago
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- stack based buffer overflow in MsIo64.sys, Proof of Concept Local Privilege Escalation to nt authority/system☆13Jun 7, 2021Updated 5 years ago
- manually map driver for a signed driver memory space☆181Mar 11, 2021Updated 5 years ago
- HVCI/kCET-aware bugcheck suppressor PoC☆22May 11, 2026Updated 5 months ago
- comparing data of module exports from disk and memory, then caching any differences.☆26Dec 11, 2021Updated 4 years ago
- Virtualization Simply Code☆24May 13, 2022Updated 4 years ago
- A minimalistic way to spoof return addresses without using exceptions☆21Jul 26, 2022Updated 4 years ago
- WinDbg-like kernel debugger for Windows, from Linux and macOS☆228Updated this week
- Morok is a modular C++23 LLVM New-PM IR obfuscator. It loads as a pass plugin inside clang or opt, rewrites LLVM IR, and emits a behavior…☆106Oct 26, 2026Updated last week
- hy-rs, pronounced high rise, provides a unified and portable to the hypervisor APIs provided by various platforms.☆20Mar 10, 2022Updated 4 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- DWM Overlay Demonstration for 25H2☆26Jan 5, 2026Updated 9 months ago
- ntos shit☆35Feb 15, 2024Updated 2 years ago
- a cooler signature scanning and creation library for binja☆81Oct 14, 2025Updated last year
- nmi stackwalking + module verification☆186Dec 28, 2023Updated 2 years ago
- Some research on AltSystemCallHandlers functionality in Windows 10 20H1 18999☆245Nov 6, 2019Updated 6 years ago
- kernel mode anti cheat☆686Aug 4, 2024Updated 2 years ago
- Analyzing the driver and internal module of EasyAntiCheat.☆38May 1, 2023Updated 3 years ago