Alternatives and similar repositories for Gremlins

Users that are interested in Gremlins are comparing it to the libraries listed below

• tux3 / crowdstrike-cloudproto

  View on GitHub
  Async rust support for the reverse-engineered Crowdstrike Falcon protocol between the Sensor and cloud services
  ☆17Mar 10, 2023Updated 2 years ago
• ch3rn0byl / CVE-2021-21551

  View on GitHub
  ☆25May 21, 2021Updated 4 years ago
• alfarom256 / MCP-PoC

  View on GitHub
  Minifilter Callback Patching Proof-of-Concept
  ☆73Oct 31, 2022Updated 3 years ago
• mzakocs / CVE-2021-21551-POC

  View on GitHub
  An extended proof-of-concept for the CVE-2021-21551 Dell ‘dbutil_2_3.sys’ Kernel Exploit
  ☆24Jul 20, 2021Updated 4 years ago
• mgrube / recon_22

  View on GitHub
  ☆10Jun 11, 2022Updated 3 years ago
• hotnops / AzureScripts

  View on GitHub
  Random scripts for azure stuff
  ☆13Oct 12, 2022Updated 3 years ago
• SygniaLabs / BackupKeyManager

  View on GitHub
  ☆17Jul 16, 2024Updated last year
• EBalloon / ThreadNotify

  View on GitHub
  ☆12Oct 12, 2021Updated 4 years ago
• WolfyZ99 / Kernel-RPM-WPM-with-Driver-Destroyer

  View on GitHub
  ☆12Jun 30, 2019Updated 6 years ago
• alal4465 / HeavensGateHook

  View on GitHub
  Hooking Heavens Gate in a weekend
  ☆13Jan 1, 2022Updated 4 years ago
• POPFD / cascade

  View on GitHub
  A thin introspection hypervisor framework that allows for low level resource manipulation.
  ☆12Jan 27, 2024Updated 2 years ago
• KelvinMsft / TechMyths

  View on GitHub
  ☆18Mar 28, 2023Updated 2 years ago
• flankersky / WinStack

  View on GitHub
  Try to transport the tcpip stack of ReactOS to Windows XP.
  ☆17Feb 27, 2014Updated 11 years ago
• NullTerminatorr / ThreadHijackingInjector

  View on GitHub
  Simple dll injector that uses thread hijacking to execute the payload
  ☆12Jul 7, 2022Updated 3 years ago
• alfarom256 / MinifilterResearch

  View on GitHub
  ☆16Oct 31, 2022Updated 3 years ago
• ch3rn0byl / Charon

  View on GitHub
  A UEFI extraction tool
  ☆24Nov 3, 2024Updated last year
• HuskyHacks / RustyTokenManipulation

  View on GitHub
  just manipulatin these here tokens yes sir nothing weird
  ☆22Apr 18, 2022Updated 3 years ago
• namazso / msvcrt.lib

  View on GitHub
  .lib file for linking against the NT CRT
  ☆18Mar 18, 2022Updated 3 years ago
• waleedassar / ALPC_CLIENT_SERVER

  View on GitHub
  Demo to show how write ALPC Client & Server using native Ntdll.dll syscalls.
  ☆21Jan 25, 2022Updated 4 years ago
• ck0i / Cloakwork

  View on GitHub
  An advanced singular header-only C++20 obfuscation library with encryption and polymorphism.
  ☆53Updated this week
• ByteWhite1x1 / Driver-DKOM

  View on GitHub
  An advanced DKOM for drivers with "DRIVER_OBJECT"
  ☆22Feb 19, 2023Updated 2 years ago
• rbmm / LdrpKernel32DllName

  View on GitHub
  ☆90Jun 2, 2024Updated last year
• MITRECND / picaboo

  View on GitHub
  Specialized tool to dump Position Independent Code.
  ☆22Aug 4, 2020Updated 5 years ago
• zeronetworks / WTF-WFP

  View on GitHub
  ☆25Dec 16, 2024Updated last year
• chkpizza / runtime

  View on GitHub
  VEH Redirect & VEH Debugger
  ☆23May 18, 2020Updated 5 years ago
• vportal / HEVD

  View on GitHub
  HackSysExtremeVulnerableDriver exploits for latest Windows 10 version
  ☆26Jan 13, 2026Updated last month
• ByteWhite1x1 / PatchGuardResearch

  View on GitHub
  Bypassing kernel patch protection runtime
  ☆21Feb 19, 2023Updated 2 years ago
• not-matthias / kernel-alloc-rs

  View on GitHub
  Minimalistic Windows Kernel Allocator.
  ☆51Sep 5, 2024Updated last year
• WithSecureLabs / TickTock

  View on GitHub
  ☆113Oct 10, 2022Updated 3 years ago
• TheMalwareGuardian / Bootkits-Rootkits-Development-Environment

  View on GitHub
  Automated environment setup for Bootkit & Rootkit development.
  ☆35Aug 9, 2025Updated 6 months ago
• rmccrystal / modmap

  View on GitHub
  Modmap updated to work on Windows 11
  ☆28Jul 30, 2021Updated 4 years ago
• ExpLife0011 / KeUserModeCallBack

  View on GitHub
  A Simple Example
  ☆23Nov 30, 2018Updated 7 years ago
• prash-wghats / Dtrace-ETW

  View on GitHub
  DTrace for Windows in userspace; Frontend to ETW
  ☆27Oct 4, 2022Updated 3 years ago
• merill / graph-permissions-explorer

  View on GitHub
  Repository for public site hosting graph permissions
  ☆33Updated this week
• weak1337 / ModExMap

  View on GitHub
  ☆25Aug 9, 2021Updated 4 years ago
• mike1k / ImportCallObfuscator

  View on GitHub
  Obfuscate calls to imports by patching in stubs
  ☆72Aug 4, 2021Updated 4 years ago
• bi-zone / rdtsc-checkvirt-poc

  View on GitHub
  Virtualization detection through speculative execution PoCs and papers
  ☆69May 22, 2018Updated 7 years ago
• nccgroup / DetectWindowsCopyOnWriteForAPI

  View on GitHub
  Enumerate various traits from Windows processes as an aid to threat hunting
  ☆202Jan 13, 2022Updated 4 years ago
• xpn / WAMBam

  View on GitHub
  Tooling related to the WAM Bam - Recovering Web Tokens From Office blog post
  ☆130Jan 14, 2023Updated 3 years ago