Alternatives and similar repositories for Hook_KiUserExceptionDispatcher

Users that are interested in Hook_KiUserExceptionDispatcher are comparing it to the libraries listed below

• nbqofficial / asm-lib

  View on GitHub
  Libraries written in inline assembly
  ☆19Aug 7, 2023Updated 2 years ago
• 1401199262 / InstrumentationCallback

  View on GitHub
  ☆29Dec 29, 2022Updated 3 years ago
• peta909 / NtCreateUserProcess_

  View on GitHub
  ☆12Jan 21, 2019Updated 7 years ago
• adrianyy / x64-injector

  View on GitHub
  x64 injector using LoadLibrary made in assembler (MASM)
  ☆27Jun 28, 2018Updated 7 years ago
• kouzhudong / PacketInjection

  View on GitHub
  Packet Injection With WFP
  ☆16Feb 20, 2023Updated 2 years ago
• moccajoghurt / MemWars

  View on GitHub
  ☆44Oct 7, 2018Updated 7 years ago
• gabriellandau / CISpotter

  View on GitHub
  Code Integrity Violation Spotter
  ☆17Jun 11, 2024Updated last year
• kagasu / VEHTest

  View on GitHub
  Example of making debugger using Hardware Breakpoint + VEH
  ☆18May 13, 2021Updated 4 years ago
• bb107 / ServiceCall

  View on GitHub
  Interprocess communication library, providing the ability to call functions from each other
  ☆20Oct 3, 2019Updated 6 years ago
• AzureGreen / VAToPA

  View on GitHub
  a demo for x86/x64's paging memory management learning, convert a virtual address from ring3 to physical address in ring0
  ☆19Aug 26, 2017Updated 8 years ago
• waleedassar / ALPC_CLIENT_SERVER

  View on GitHub
  Demo to show how write ALPC Client & Server using native Ntdll.dll syscalls.
  ☆21Jan 25, 2022Updated 4 years ago
• addrianyy / asmlib_x64

  View on GitHub
  x64 assembler library
  ☆31Jun 7, 2024Updated last year
• chkpizza / runtime

  View on GitHub
  VEH Redirect & VEH Debugger
  ☆23May 18, 2020Updated 5 years ago
• Jerem584 / UDDumper

  View on GitHub
  ☆17Dec 3, 2020Updated 5 years ago
• helloobaby / Nmi-Callback

  View on GitHub
  detect hypervisor with Nmi Callback
  ☆42Sep 25, 2022Updated 3 years ago
• kyREcon / IsKernelDebuggerPresent

  View on GitHub
  Detects if a Kernel mode debugger is active by reading the value of KUSER_SHARED_DATA.KdDebuggerEnabled. It is a high level and portable …
  ☆23Sep 18, 2017Updated 8 years ago
• waryas / PussInjector

  View on GitHub
  ☆27Oct 16, 2017Updated 8 years ago
• alfarom256 / UserVAtoPhysical

  View on GitHub
  Walks the Process' VAD list to grab the PTE's corresponding to a usermode virtual address, all to get the physical address
  ☆23Nov 22, 2021Updated 4 years ago
• CyberSecurityExploitDevelopment / SMBLibrary

  View on GitHub
  Windows CIFS/SMB packet generation and SMB networking library
  ☆12Aug 25, 2020Updated 5 years ago
• adrianyy / nasm_shellcode

  View on GitHub
  NASM listing to shellcode converter
  ☆14May 6, 2018Updated 7 years ago
• lauralex / kdprocdumper

  View on GitHub
  My Personal Kernel-Mode Process dumper
  ☆13Feb 18, 2024Updated last year
• andyvand / msirda

  View on GitHub
  Microsoft decompiled IrDA drivers
  ☆16Apr 15, 2015Updated 10 years ago
• Apxaey / Begineer-Friendly-Inline-Hooking-x86

  View on GitHub
  https://www.youtube.com/watch?v=qsjGj_L1kyo
  ☆10Jul 29, 2021Updated 4 years ago
• ganboing / shim_test

  View on GitHub
  ☆15Mar 28, 2015Updated 10 years ago
• PhysX1337 / BloodHunt

  View on GitHub
  ☆11Sep 25, 2021Updated 4 years ago
• flopas10 / KateBot-for-Panorama

  View on GitHub
  KateBot CSGO cheat by klorik updated with Panorama UI support. NOT FUNCTIONAL YET
  ☆10Jul 22, 2018Updated 7 years ago
• huoji120 / mash_hypervisor

  View on GitHub
  mash hypervisor host pml4
  ☆17Jun 22, 2022Updated 3 years ago
• eddeeh / drv-client

  View on GitHub
  A simple process query/manipulation tool using driver hooked system call. (2019)
  ☆11Aug 30, 2021Updated 4 years ago
• kouzhudong / libdrv

  View on GitHub
  Static Library For Windows Drivers
  ☆41Dec 13, 2025Updated 2 months ago
• NMan1 / splitgate-cheat

  View on GitHub
  internal splitgate cheat. esp only, good base
  ☆10Aug 22, 2021Updated 4 years ago
• qq1045551070 / MyDebugger

  View on GitHub
  ☆14May 10, 2021Updated 4 years ago
• lennyRBLX / window_hijack

  View on GitHub
  Rendering on external windows via hijacking thread contexts, with notes on ValidateHwnd
  ☆14Jul 9, 2020Updated 5 years ago
• zhuhuibeishadiao / DriverMaper

  View on GitHub
  map driver to memory
  ☆26Aug 26, 2018Updated 7 years ago
• EBalloon / MapPage

  View on GitHub
  Mapping your code on a 0x1000 size page
  ☆71May 20, 2022Updated 3 years ago
• BaiFeng666 / BFDrvTools

  View on GitHub
  ☆15Jan 21, 2026Updated 3 weeks ago
• wyyqyl / HookIAT

  View on GitHub
  ☆15Sep 24, 2012Updated 13 years ago
• punishell / WindowsLegacyCVE

  View on GitHub
  ☆10Nov 11, 2020Updated 5 years ago
• killvxk / Kernelmode-driver

  View on GitHub
  Simple IOCTL hooking driver for Kernel- User - Mode communication.
  ☆11Jul 26, 2020Updated 5 years ago
• zer0mem / VadScanner

  View on GitHub
  PoC of BOOST-ed _EPROCESS.VadRoot iterating
  ☆27May 21, 2014Updated 11 years ago