Alternatives and similar repositories for rawccopy:

Users that are interested in rawccopy are comparing it to the libraries listed below

• jbaines-r7 / dellicious
  Enabled / Disable LSA Protection via BYOVD
  ☆66Updated 3 years ago
• pr0tean / TelemetrySourcerer-patched
  Tiny driver patch to allow kernel callbacks to work on Win10 21h1
  ☆34Updated 3 years ago
• benheise / TitanLdr
  Titan: A crappy Reflective Loader written in C and assembly for Cobalt Strike. Redirects DNS Beacon over DoH
  ☆46Updated 3 years ago
• 0xMegaByte / COM-Explained
  ☆25Updated 2 years ago
• NtRaiseHardError / Sysmon
  Sysmon shenanigans
  ☆65Updated 4 years ago
• orca-eaa5a / mploader
  Portable & Custmizable Windows Defender
  ☆12Updated 3 years ago
• Idov31 / UdpInspector
  Listing UDP connections with remote address without sniffing.
  ☆30Updated last year
• jonaslyk / temp
  ☆70Updated 2 years ago
• Coldzer0 / TinyPDBParser
  Windows PDB Parser using Imagehlp library.
  ☆16Updated 2 years ago
• VergiliusProject / kernels-data
  Windows kernel PDB data parsed into YAML
  ☆34Updated 4 months ago
• lilkui / runasti
  Runs programs as TrustedInstaller
  ☆49Updated 5 years ago
• Fleex255 / CustomShim
  Example/starter code for custom Windows application compatibility shims
  ☆33Updated 4 years ago
• 7eRoM / elam
  A Practical example of ELAM (Early Launch Anti-Malware)
  ☆32Updated 3 years ago
• LloydLabs / process-enumeration-stealth
  ☆80Updated 6 months ago
• hasherezade / libpeconv_tpl
  A ready-made template for a project based on libpeconv.
  ☆44Updated 2 weeks ago
• DebugPrivilege / WindowsAP1
  Code samples that serve as references for Windows API functions
  ☆30Updated 9 months ago
• nccgroup / mimikatz-detector-condrv
  The Console Monitor Driver is a KMDF kernel-mode filter driver that captures certain Fast I/O operations (input and output) that is sent …
  ☆37Updated 2 years ago
• rbmm / LdrpKernel32DllName
  ☆83Updated 9 months ago
• ch3rn0byl / Gremlins
  ☆14Updated last year
• RobinFassinaMoschiniForks / TransitionalPeriod
  Former Multi - Ring to Kernel To UserMode Transitional Shellcode For Remote Kernel Exploits
  ☆28Updated 2 years ago
• jsecurity101 / MSFT_DriverBlockList
  Repository of Microsoft Driver Block Lists based off of OS-builds
  ☆39Updated 10 months ago
• alfarom256 / MCP-PoC
  Minifilter Callback Patching Proof-of-Concept
  ☆66Updated 2 years ago
• zodiacon / WinEventHooks
  SetWinEventHook Sample
  ☆46Updated last year
• hasherezade / pe2pic
  Small visualizator for PE files
  ☆67Updated last year
• trailofbits / WinDbg-JS
  ☆23Updated last year
• loneicewolf / KernelMode-Code
  2022 Updated Kernelmode-Code
  ☆30Updated 11 months ago
• Flawww / NtSyscaller
  Manually perform syscalls without going through any external API or DLL.
  ☆18Updated last year
• mobdk / CloneProcess
  Clone running process with ZwCreateProcess
  ☆57Updated 4 years ago
• 0vercl0k / inject
  Yet another Windows DLL injector.
  ☆38Updated 3 years ago
• gerhart01 / Hyper-V-Tools
  Different tools for Microsoft Hyper-V researching
  ☆48Updated 9 months ago