Alternatives and similar repositories for efi-monitor

Users that are interested in efi-monitor are comparing it to the libraries listed below

• ekknod / sumap

  View on GitHub
  manually map driver for a signed driver memory space
  ☆174Mar 11, 2021Updated 4 years ago
• donnaskiez / nmi

  View on GitHub
  nmi stackwalking + module verification
  ☆161Dec 28, 2023Updated 2 years ago
• ekknod / acdrv

  View on GitHub
  base for testing
  ☆186Sep 28, 2024Updated last year
• SamuelTulach / DirectPageManipulation

  View on GitHub
  A basic demonstration of directly overwriting paging structures for physical memory r/w and interprocess memory copy
  ☆103Jun 26, 2023Updated 2 years ago
• VollRagm / lpmapper

  View on GitHub
  A mapper that maps shellcode into loaded large page drivers
  ☆321Apr 26, 2022Updated 3 years ago
• dnz-c / supermode

  View on GitHub
  page table manipulation to gain physical r/w
  ☆43May 7, 2024Updated last year
• xu-Wan / HypercallPageHook

  View on GitHub
  POC Hook of nt!HvcallCodeVa
  ☆54May 8, 2023Updated 2 years ago
• zer0condition / ZeroThreadKernel

  View on GitHub
  Recursive and arbitrary code execution at kernel-level without a system thread creation
  ☆159Apr 13, 2023Updated 2 years ago
• Valthrun / valthrun-uefi-mapper

  View on GitHub
  Windows driver mapper via the UEFI
  ☆55Jul 13, 2025Updated 7 months ago
• KANKOSHEV / Detect-HiddenThread-via-KPRCB

  View on GitHub
  Detect removed thread from PspCidTable.
  ☆75Mar 18, 2022Updated 3 years ago
• MapleSwan / enum_real_dirbase

  View on GitHub
  从MmPfnData中枚举进程和页目录基址
  ☆205Aug 18, 2023Updated 2 years ago
• StealthyCheese / File-based-Communication

  View on GitHub
  communicate with kernel using a image on disk
  ☆16May 1, 2024Updated last year
• armvirus / CosMapper

  View on GitHub
  Loads a signed kernel driver which allows you to map any driver to kernel mode without any traces of the signed / mapped driver.
  ☆377Aug 8, 2021Updated 4 years ago
• AdamOron / PatchGuardBypass

  View on GitHub
  Bypassing PatchGuard on modern x64 systems
  ☆265Apr 9, 2023Updated 2 years ago
• Cesusius / Dse-Patcher

  View on GitHub
  Patches DSE by swapping both data ptrs located in SeValidateImageHeader && SeValidateImageData
  ☆22Feb 9, 2024Updated 2 years ago
• 1401199262 / HookHvcallCodeVa

  View on GitHub
  ☆23May 8, 2023Updated 2 years ago
• stdhu / windows-kernel-pagehook

  View on GitHub
  windows kernel pagehook
  ☆41Oct 30, 2022Updated 3 years ago
• armvirus / SinMapper

  View on GitHub
  usermode driver mapper that forcefully loads any signed kernel driver (legit cert) with a big enough section (example: .data, .rdata) to …
  ☆469Jan 3, 2022Updated 4 years ago
• pTerrance / alpc-km-um

  View on GitHub
  POC usermode <=> kernel communication via ALPC.
  ☆70Jun 6, 2024Updated last year
• EBalloon / Rw-No-Attach

  View on GitHub
  ☆159May 21, 2024Updated last year
• zer0condition / NVDrv

  View on GitHub
  Abusing nvidia driver (nvoclock.sys) for physical/virtual memory and control register manipulation.
  ☆276Aug 25, 2023Updated 2 years ago
• J0xna / Kernel-Overlay-Hider

  View on GitHub
  ☆148Jan 24, 2024Updated 2 years ago
• SamuelTulach / memhv

  View on GitHub
  Minimalistic AMD-V/SVM hypervisor with memory introspection capabilities
  ☆364Feb 26, 2025Updated 11 months ago
• 1401199262 / HookSwapContext

  View on GitHub
  ☆34Apr 11, 2023Updated 2 years ago
• SiyahS4ncak / S4Mapper

  View on GitHub
  ☆27Oct 18, 2023Updated 2 years ago
• vasie1337 / kernel-anticheat

  View on GitHub
  kernel anticheat to test your driver against
  ☆181Jun 16, 2025Updated 8 months ago
• Sentient111 / ClearDriverTraces

  View on GitHub
  clearing traces of a loaded driver
  ☆47Jul 2, 2022Updated 3 years ago
• zer0condition / GDRVLib

  View on GitHub
  Virtual and physical memory hacking library using gigabyte vulnerable driver
  ☆71Apr 9, 2023Updated 2 years ago
• KiFilterFiberContext / warbird-hook

  View on GitHub
  Using Microsoft Warbird to automatically unpack and execute encrypted shellcode in ClipSp.sys without triggering PatchGuard
  ☆265Aug 31, 2022Updated 3 years ago
• fengjixuchui / SharedMemory-By-Frankoo

  View on GitHub
  Kernel driver that uses Shared memory to communicate with UserMode
  ☆88Apr 25, 2019Updated 6 years ago
• 1401199262 / NMIStackWalk

  View on GitHub
  ☆73Aug 31, 2022Updated 3 years ago
• estimated1337 / lenovo_mapper

  View on GitHub
  driver manual mapper powered by https://github.com/estimated1337/lenovo_exec
  ☆115Dec 28, 2022Updated 3 years ago
• iqrw0 / DieDMAProtection

  View on GitHub
  ☆29Mar 9, 2024Updated last year
• 1401199262 / CheatEngine_Bypass

  View on GitHub
  ☆27Jun 24, 2022Updated 3 years ago
• ekknod / SubGetVariable

  View on GitHub
  Old project (2020) reformed. Modifies gRT->GetVariable sub function from EFI_APPLICATION. Tested on Win10 22H2 (AMD).
  ☆56Feb 28, 2024Updated last year
• btbd / umap

  View on GitHub
  UEFI bootkit for driver manual mapping
  ☆583Jan 1, 2024Updated 2 years ago
• Rogue619Z / Manual-Map-Injector

  View on GitHub
  I've developed a rather effective driver for DLL injection targeting EAC Protected Games, and since i dont care for any notable games uti…
  ☆104Apr 24, 2024Updated last year
• SamuelTulach / eac_cr3_shuffle

  View on GitHub
  ☆90Oct 6, 2023Updated 2 years ago
• gmh5225 / Hook-HvlSwitchVirtualAddressSpace

  View on GitHub
  Not mine. Only for saving
  ☆26Jun 28, 2022Updated 3 years ago