☆98Jun 3, 2024Updated 2 years ago
Alternatives and similar repositories for user-kernel-syscall-hook
Users that are interested in user-kernel-syscall-hook are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- A parser for Microsoft PDB (Program Database) debugging information☆24Nov 5, 2024Updated last year
- Rust library for lifting raw binary data to LLVM IR☆66Jul 8, 2026Updated 2 months ago
- ☆21May 30, 2024Updated 2 years ago
- Provides commands to read from and write to arbitrary kernel-mode memory for users with the Administrator privilege. HVCI compatible. No …☆25Jun 16, 2024Updated 2 years ago
- obfuscation that aims to not stand out☆22Mar 27, 2022Updated 4 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- This plugin serves as a bridge between Binary Ninja and Ghidra's disassembler.☆31Jun 27, 2022Updated 4 years ago
- Mixed Boolean Arithmetic Expression Obfuscator☆77Jul 26, 2023Updated 3 years ago
- Load dll with undocumented functions and debug symbols☆46Jul 20, 2024Updated 2 years ago
- Create stealthy, inline, EPT-like hooks using SMAP and SMEP☆69Oct 19, 2024Updated last year
- Deobfuscation of Semi-Linear Mixed Boolean-Arithmetic Expressions☆89Mar 28, 2026Updated 5 months ago
- a parser for the .map file included in the aimware leak☆17Feb 19, 2023Updated 3 years ago
- Logic-Oriented Opaque Predicate Detection in Obfuscated Binary Code☆50Jan 19, 2016Updated 10 years ago
- Compiler for reverse engineers☆52Aug 1, 2026Updated last month
- intel vt-x type 2 hypervisor☆69Apr 13, 2025Updated last year
- Simple, predictable pricing with DigitalOcean hosting • AdAlways know what you'll pay with monthly caps and flat pricing. Enterprise-grade infrastructure trusted by 600k+ customers.
- intel x86(-64) code analysis library that reconstructs control flow☆112Jul 25, 2026Updated last month
- Windows 10 DLL Injector via Driver utilizing VAD and hiding the loaded driver☆54Oct 19, 2023Updated 2 years ago
- Some research on AltSystemCallHandlers functionality in Windows 10 20H1 18999☆243Nov 6, 2019Updated 6 years ago
- Achieve arbitrary kernel read/writes/function calling in Hypervisor-Protected Code Integrity (HVCI) protected environments calling withou…☆293Mar 16, 2026Updated 6 months ago
- Find out how to bypass HVCI (or not). My own research on Microsoft Warbird (specifically in clipsp.sys)☆101Oct 26, 2025Updated 10 months ago
- A Binary Ninja plugin to detect Themida, WinLicense and Code Virtualizer's obfuscated code locations.☆101Jul 28, 2024Updated 2 years ago
- An extremely experimental Binary Ninja importer for the type layout information emitted by the -Zprint-type-sizes flag of the Rust compil…☆36Mar 19, 2026Updated 6 months ago
- Admin to Kernel code execution using the KSecDD driver☆272Apr 19, 2024Updated 2 years ago
- research revolving the windows filtering platform callout mechanism☆41May 26, 2024Updated 2 years ago
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- Tool for generating C++ classes and json from PDB, DWARF and ELF symbols (Work in progress)☆53Nov 16, 2018Updated 7 years ago
- Kernel ReClassEx☆67Nov 21, 2023Updated 2 years ago
- Native code virtualizer for x64 binaries☆545Dec 20, 2024Updated last year
- manual map unsigned driver over signed memory☆231Apr 11, 2024Updated 2 years ago
- POC Hook of nt!HvcallCodeVa☆53May 8, 2023Updated 3 years ago
- Virtualization Simply Code☆24May 13, 2022Updated 4 years ago
- hy-rs, pronounced high rise, provides a unified and portable to the hypervisor APIs provided by various platforms.☆20Mar 10, 2022Updated 4 years ago
- Recursive and arbitrary code execution at kernel-level without a system thread creation☆159Mar 16, 2026Updated 6 months ago
- .lib file for linking against the NT CRT☆19Mar 18, 2022Updated 4 years ago
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- comparing data of module exports from disk and memory, then caching any differences.☆26Dec 11, 2021Updated 4 years ago
- Using Microsoft Warbird to automatically unpack and execute encrypted shellcode in ClipSp.sys without triggering PatchGuard☆267Aug 31, 2022Updated 4 years ago
- x86-64 code/pe virtualizer☆217Dec 2, 2024Updated last year
- A basic implementation of Patch Guard that I implemented, that includes integrity checks and other protection mechanisms I added.☆78Mar 29, 2025Updated last year
- A PoC tool for exploiting leaked process and thread handles☆36Feb 13, 2024Updated 2 years ago
- ☆106Oct 25, 2025Updated 10 months ago
- ☆14Mar 13, 2023Updated 3 years ago