Alternatives and similar repositories for physmem

Users that are interested in physmem are comparing it to the libraries listed below

• mrexodia / EfiCMake
  CMake template for a basic EFI application/bootkit. This library is header-only, there is no EDK2 runtime!).
  ☆79Updated 3 years ago
• xsh3llsh0ck / Calamity
  Example of using Windows Platform Binary Table (WPBT)
  ☆26Updated 2 years ago
• Flawww / WoW64Injection
  Proof of concept for injecting a 64-bit DLL into a 32-bit application
  ☆43Updated 2 years ago
• MiroKaku / Musa.Core
  Use ntdll/ntoskrnl to implement Kernel32, Advapi32 and other APIs. It includes user-mode and kernel-mode.
  ☆95Updated 4 months ago
• irql / nokd
  reverse engineering of the windows nt kernel debugger protocol & reimplementation.
  ☆35Updated last year
• KNSoft / KNSoft.SlimDetours
  An improved Detours.
  ☆100Updated last week
• mibho / x64dbg-vmp-trace
  unorthodox approach to analyze a trace, but this helped me get comfy with x64 instructions overall (excluding sse/avx/etc lol), cleared u…
  ☆64Updated last year
• NewWorldComingSoon / llvm-msvc
  This project migrated to https://github.com/backengineering/llvm-msvc
  ☆83Updated 2 years ago
• zodiacon / PoolMonXv3
  Monitor Kernel pool allocations tags
  ☆76Updated 2 years ago
• zodiacon / DbgPrint
  Debug Print viewer (user and kernel)
  ☆69Updated last year
• BerkanYildiz / EasyNT
  Windows Kernel API wrapper with simplified functions and enterprise driver extensions.
  ☆31Updated 6 months ago
• lunar-rf / cdl86
  Tiny C x86_64 function detouring library.
  ☆28Updated 2 weeks ago
• ekknod / KiSystemStartupMeme
  Custom KiSystemStartup, can be used to modificate kernel before boot.
  ☆51Updated 3 years ago
• utoni / mingw-w64-dpp
  "Mingw64 Driver Plus Plus": Mingw64, C++, DDK and (EA)STL made easy!
  ☆43Updated 2 months ago
• GetRektBoy724 / KPDB
  Windows PDB parser for kernel-mode environment.
  ☆103Updated 7 months ago
• SHA-MRIZ / DisplayMiniportHooking
  ☆51Updated 5 years ago
• HyperDbg / RedDbg
  Hypervisor-based debugger for AMD processors
  ☆61Updated last year
• papstuc / portable_executable
  modern c++ wrapper around the microsoft portable executable file format
  ☆33Updated last month
• gmh5225 / DSE-Patcher
  https://www.codeproject.com/Articles/5348168/Disable-Driver-Signature-Enforcement-with-DSE-Patc
  ☆21Updated 2 years ago
• Sinclairq / tp-emulator
  A basic 100 loc CPU emulator using the existing code of ntoskrnl.exe
  ☆75Updated 2 years ago
• paysonism / saturn-mapper
  Load vulnerable drivers using iqvw64e.sys hijack
  ☆34Updated last year
• Fyyre / ntdll
  ntdll.h - compatible with MSVC 6.0, Intel C++ Compiler and MinGW. Serves as a complete replacement for Windows.h
  ☆149Updated 6 years ago
• armvirus / VanguardTrace
  Decrypting and intercepting encrypted imports of Vanguards Kernel Driver
  ☆37Updated last year
• sonyps5201314 / wow64ext
  Another wow64ext to try to be compatible with WOW64 for all architectures.
  ☆98Updated last week
• synctop / tpm-mmio
  Using MMIO (Memory-Mapped I/O) to read TPM 2.0 public Endorsement Key.
  ☆50Updated last year
• KiFilterFiberContext / windows-software-policy
  Research on obfuscated licensing APIs / CLIP service in the Windows kernel
  ☆127Updated 3 years ago
• sum-catnip / kptnhook
  windows kernelmode driver to inject dll into each and every process and perform systemwide function hooking
  ☆53Updated 3 years ago
• ievukas / ntos-boot
  The bootloader for the latest versions of Windows NT, Windows 8 to Windows 11.
  ☆24Updated 5 years ago
• Ahora57 / Unabomber
  Improved VMP Idea(detect anti-anti-debug tools by bug)
  ☆46Updated 2 years ago
• kkent030315 / anyvtop
  x64 Windows implementation of virtual-address to physical-address translation
  ☆46Updated 4 years ago