Alternatives and similar repositories for undocumented_kernel

Users that are interested in undocumented_kernel are comparing it to the libraries listed below

• codereversing / debugger
  Sample debugger for x86 and x64
  ☆4Updated 2 years ago
• codereversing / manualenum
  Enumerate process modules manually
  ☆9Updated 2 years ago
• codereversing / sehveh_hook
  Hooking functions with structured and vectored exception handling
  ☆8Updated 2 years ago
• codereversing / process_replacement
  Run one process as another under Windows
  ☆11Updated 2 years ago
• codereversing / undocumented_veh
  Reverse engineering AddVectoredExceptionHandler
  ☆3Updated 2 years ago
• codereversing / guardpage_hook
  Hooking functions with guard pages
  ☆9Updated 2 years ago
• codereversing / x64_remotecall
  Perform remote calls in x64
  ☆7Updated 2 years ago
• mgeeky / prc_xchk
  User-mode process cross-checking utility intended to detect naive malware hiding itself by hooking IAT/EAT.
  ☆19Updated 9 years ago
• owerosu / packerPE32
  Simple PE packer with RtlCompressBuffer
  ☆21Updated 9 years ago
• changeofpace / Remote-Process-Cookie-for-Windows-7
  Obtain remote process cookies by performing a brute-force attack on ntdll.RtlDecodePointer using known pointer encodings.
  ☆22Updated 7 years ago
• ajkhoury / Dude-Loader
  Class implementation of PowerLoader injection technique
  ☆30Updated 8 years ago
• codereversing / vtable_hook
  Hooking vtables
  ☆10Updated 2 years ago
• codereversing / apicall_replacement
  An idea in hooking APIs by replacing calls that lead to them
  ☆1Updated 2 years ago
• tandasat / ListWorkItems
  Lists work items being queued currently.
  ☆14Updated 9 years ago
• NtRaiseHardError / Providence
  Kernel-mode file scanner
  ☆18Updated 6 years ago
• sin5678 / wow64hook
  wow64 syscall filter
  ☆13Updated 10 years ago
• tandasat / CVE-2014-0816
  CVE-2014-0816
  ☆25Updated 8 years ago
• codereversing / heapdiff
  Diffing process heaps
  ☆15Updated 2 years ago
• IgorKorkin / AllMemProTestBed
  Legal access: The driver and console app to demonstrate the basic memory access in kernel mode
  ☆9Updated 7 years ago
• tandasat / hyperplatform_log_parser
  User-mode program parsing logs created by HyperPlatform
  ☆18Updated 8 years ago
• codereversing / api_monitor
  Hook APIs and send data back to another process with Google Protobufs
  ☆2Updated 2 years ago
• killvxk / ShellTool
  Shell Tool for BIOS Developer
  ☆10Updated 8 years ago
• Darkabode / amte
  Analysis and Modification Tool for Executables
  ☆16Updated 6 years ago
• AntiRootkit / BDArkit
  just an lite AntiRootkit for interesting
  ☆23Updated 9 years ago
• sam-b / win-driver-tools
  A couple of little tools I've made for working with Windows Drivers
  ☆15Updated 9 years ago
• NtRaiseHardError / NoREpls
  NoREpls - Application designed for the purposes of reverse engineering.
  ☆11Updated 6 years ago
• almost-real / IDBG
  Allows you to add breakpoints from IDA (from the graph/text view) to WinDbg easily
  ☆14Updated 6 years ago
• zer0fl4g / OllyCallstack
  simple plugin for lastest olly versions to display the callstack
  ☆16Updated 12 years ago
• ycscaly / Windows-Kernel-Research
  A project dedicated towards researching the Windows operating system's kernel mode enviornment.
  ☆8Updated 9 years ago
• wirepair / Ninko
  PIN Tool for monitoring calls and writes from obfuscated code.
  ☆26Updated 5 years ago