Alternatives and similar repositories for physmem

Users that are interested in physmem are comparing it to the libraries listed below

• irql / nokd
  reverse engineering of the windows nt kernel debugger protocol & reimplementation.
  ☆35Updated last year
• xsh3llsh0ck / Calamity
  Example of using Windows Platform Binary Table (WPBT)
  ☆26Updated 2 years ago
• mrexodia / EfiCMake
  CMake template for a basic EFI application/bootkit. This library is header-only, there is no EDK2 runtime!).
  ☆79Updated 3 years ago
• HyperDbg / RedDbg
  Hypervisor-based debugger for AMD processors
  ☆63Updated last year
• lunar-sh / cdl86
  Tiny C x86_64 function detouring library.
  ☆28Updated last week
• MiroKaku / Musa.Core
  Use ntdll/ntoskrnl to implement Kernel32, Advapi32 and other APIs. It includes user-mode and kernel-mode.
  ☆96Updated 5 months ago
• BerkanYildiz / EasyNT
  Windows Kernel API wrapper with simplified functions and enterprise driver extensions.
  ☆31Updated 6 months ago
• ievukas / ntos-boot
  The bootloader for the latest versions of Windows NT, Windows 8 to Windows 11.
  ☆26Updated 5 years ago
• KNSoft / KNSoft.SlimDetours
  An improved Detours.
  ☆104Updated last week
• KiFilterFiberContext / windows-software-policy
  Research on obfuscated licensing APIs / CLIP service in the Windows kernel
  ☆133Updated 3 years ago
• NewWorldComingSoon / llvm-msvc
  This project migrated to https://github.com/backengineering/llvm-msvc
  ☆83Updated 2 years ago
• synctop / tpm-mmio
  Using MMIO (Memory-Mapped I/O) to read TPM 2.0 public Endorsement Key.
  ☆52Updated last year
• Sinclairq / tp-emulator
  A basic 100 loc CPU emulator using the existing code of ntoskrnl.exe
  ☆75Updated 2 years ago
• binsnake / icedpp
  A C++ wrapper for icedx86 decoder
  ☆46Updated 6 months ago
• zodiacon / DbgPrint
  Debug Print viewer (user and kernel)
  ☆71Updated last year
• utoni / mingw-w64-dpp
  "Mingw64 Driver Plus Plus": Mingw64, C++, DDK and (EA)STL made easy!
  ☆43Updated 3 months ago
• ZehMatt / zyemu
  x86-64 user mode emulation using Zydis
  ☆72Updated 4 months ago
• SamuelTulach / winzentool
  Port of zentool to Windows
  ☆27Updated 10 months ago
• GetRektBoy724 / KPDB
  Windows PDB parser for kernel-mode environment.
  ☆103Updated 7 months ago
• armvirus / VanguardTrace
  Decrypting and intercepting encrypted imports of Vanguards Kernel Driver
  ☆34Updated last year
• kkent030315 / anyvtop
  x64 Windows implementation of virtual-address to physical-address translation
  ☆46Updated 4 years ago
• backengineering / theodosius
  Small OBJ/Archive Obfuscation framework
  ☆13Updated 2 years ago
• greyb1t / GreyM
  Me fockin' pe protector
  ☆45Updated 3 years ago
• gmh5225 / DSE-Patcher
  https://www.codeproject.com/Articles/5348168/Disable-Driver-Signature-Enforcement-with-DSE-Patc
  ☆21Updated 2 years ago
• mibho / x64dbg-vmp-trace
  unorthodox approach to analyze a trace, but this helped me get comfy with x64 instructions overall (excluding sse/avx/etc lol), cleared u…
  ☆67Updated last year
• kyle-elliott / DVM
  Symbolic Execution based on lifting amd64 to z3
  ☆29Updated last year
• Ahora57 / Unabomber
  Improved VMP Idea(detect anti-anti-debug tools by bug)
  ☆47Updated 2 years ago
• ekknod / KiSystemStartupMeme
  Custom KiSystemStartup, can be used to modificate kernel before boot.
  ☆51Updated 3 years ago
• kkent030315 / EvilHooker
  Function hooks in Windows NT Kernel
  ☆27Updated 5 years ago
• jonomango / chum
  Binary rewriter for 64-bit PE files.
  ☆99Updated last year