Alternatives and similar repositories for physmem

Users that are interested in physmem are comparing it to the libraries listed below

• MiroKaku / Musa.Core
  Use ntdll/ntoskrnl to implement Kernel32, Advapi32 and other APIs. It includes user-mode and kernel-mode.
  ☆96Updated 5 months ago
• mrexodia / EfiCMake
  CMake template for a basic EFI application/bootkit. This library is header-only, there is no EDK2 runtime!).
  ☆79Updated 3 years ago
• HyperDbg / RedDbg
  Hypervisor-based debugger for AMD processors
  ☆63Updated last year
• xsh3llsh0ck / Calamity
  Example of using Windows Platform Binary Table (WPBT)
  ☆26Updated 2 years ago
• BerkanYildiz / EasyNT
  Windows Kernel API wrapper with simplified functions and enterprise driver extensions.
  ☆31Updated 7 months ago
• KNSoft / KNSoft.SlimDetours
  An improved Detours.
  ☆104Updated 2 weeks ago
• zodiacon / DbgPrint
  Debug Print viewer (user and kernel)
  ☆71Updated 2 years ago
• irql / nokd
  reverse engineering of the windows nt kernel debugger protocol & reimplementation.
  ☆36Updated last year
• SHA-MRIZ / DisplayMiniportHooking
  ☆51Updated 5 years ago
• utoni / mingw-w64-dpp
  "Mingw64 Driver Plus Plus": Mingw64, C++, DDK and (EA)STL made easy!
  ☆43Updated 3 months ago
• NewWorldComingSoon / llvm-msvc
  This project migrated to https://github.com/backengineering/llvm-msvc
  ☆83Updated 2 years ago
• ekknod / KiSystemStartupMeme
  Custom KiSystemStartup, can be used to modificate kernel before boot.
  ☆53Updated 3 years ago
• GetRektBoy724 / KPDB
  Windows PDB parser for kernel-mode environment.
  ☆103Updated 8 months ago
• mibho / x64dbg-vmp-trace
  unorthodox approach to analyze a trace, but this helped me get comfy with x64 instructions overall (excluding sse/avx/etc lol), cleared u…
  ☆67Updated 2 years ago
• ievukas / ntos-boot
  The bootloader for the latest versions of Windows NT, Windows 8 to Windows 11.
  ☆26Updated 5 years ago
• synctop / tpm-mmio
  Using MMIO (Memory-Mapped I/O) to read TPM 2.0 public Endorsement Key.
  ☆53Updated last year
• sonyps5201314 / wow64ext
  Another wow64ext to try to be compatible with WOW64 for all architectures.
  ☆98Updated last month
• Fyyre / ntdll
  ntdll.h - compatible with MSVC 6.0, Intel C++ Compiler and MinGW. Serves as a complete replacement for Windows.h
  ☆149Updated 6 years ago
• OSRDrivers / Inverted
  Example WDF/KMDF driver and test app demonstrating the "inverted call model"
  ☆37Updated 5 years ago
• Flawww / WoW64Injection
  Proof of concept for injecting a 64-bit DLL into a 32-bit application
  ☆47Updated 2 years ago
• Sinclairq / tp-emulator
  A basic 100 loc CPU emulator using the existing code of ntoskrnl.exe
  ☆75Updated 2 years ago
• ranni0225 / WRK
  Windows Research Kernel
  ☆37Updated 4 months ago
• ThomasonZhao / InfinityHookProMax
  InfinityHookProMax: Make InfinityHook great great again
  ☆51Updated 2 years ago
• yubie-re / vmp-virtualprotect-bypass
  Disables virtualprotect checks/hooks so you can modify memory and change memory protection in binaries protected by VMProtect.
  ☆135Updated 4 years ago
• Vicshann / GInjer
  Global DLL injector
  ☆71Updated 4 years ago
• paysonism / saturn-mapper
  Load vulnerable drivers using iqvw64e.sys hijack
  ☆36Updated 2 years ago
• lunar-sh / cdl86
  Tiny C x86_64 function detouring library.
  ☆28Updated 2 weeks ago
• Ahora57 / Unabomber
  Improved VMP Idea(detect anti-anti-debug tools by bug)
  ☆47Updated 2 years ago
• SamuelTulach / PatchBoot
  Guide for patching AMI Aptio V UEFI firmware to circumvent Secure Boot checks
  ☆131Updated last year
• kkent030315 / anyvtop
  x64 Windows implementation of virtual-address to physical-address translation
  ☆46Updated 4 years ago