Alternatives and similar repositories for QuickUnpack

Users that are interested in QuickUnpack are comparing it to the libraries listed below

• ByteWhite1x1 / PatchGuardResearch
  Bypassing kernel patch protection runtime
  ☆21Updated 2 years ago
• ZEROWyt / Patchguard-2023
  ☆23Updated 2 years ago
• xu-Wan / HypercallPageHook
  POC Hook of nt!HvcallCodeVa
  ☆54Updated 2 years ago
• Ahora57 / Unabomber
  Improved VMP Idea(detect anti-anti-debug tools by bug)
  ☆47Updated 2 years ago
• backengineering / msrexec
  Elevate arbitrary MSR writes to kernel execution.
  ☆44Updated 2 years ago
• emlinhax / tableflipper
  partially disable patchguard up to win11 21H2
  ☆19Updated last year
• kkent030315 / anyvtop
  x64 Windows implementation of virtual-address to physical-address translation
  ☆46Updated 4 years ago
• HyperSine / siren-hypervisor
  ☆39Updated 2 years ago
• ExpLife0011 / KeUserModeCallBack
  A Simple Example
  ☆23Updated 7 years ago
• cutecatsandvirtualmachines / DDMA
  Disk based DMA for ATA and SCSI
  ☆41Updated 2 years ago
• sum-catnip / kptnhook
  windows kernelmode driver to inject dll into each and every process and perform systemwide function hooking
  ☆53Updated 3 years ago
• ekknod / KiSystemStartupMeme
  Custom KiSystemStartup, can be used to modificate kernel before boot.
  ☆53Updated 3 years ago
• gmh5225 / FakeEnclave
  A poc that abuses Enclave
  ☆40Updated 3 years ago
• backengineering / vmhook
  A demonstration of hooking into the VMProtect-2 virtual machine
  ☆23Updated 2 years ago
• Peribunt / Exception-Ret-Spoofing
  A simple way to spoof return addresses using an exception handler
  ☆43Updated 3 years ago
• mike1k / HardwareBreakpoint
  X86/X64 Hardware Breakpoint Manager
  ☆42Updated 4 years ago
• crvvdev / intraceptor
  Intraceptor intercept Windows NT API calls and redirect them to a kernel driver to bypass process/threads handle protections.
  ☆32Updated 3 years ago
• Nou4r / Cool-Hypervisor
  A intel hypervisor, implementing many virtualization techniques
  ☆52Updated 2 years ago
• greyb1t / GreyM
  Me fockin' pe protector
  ☆45Updated 3 years ago
• NewWorldComingSoon / llvm-msvc-windows-driver-template
  Windows kernel driver template for cmkr and llvm-msvc.
  ☆35Updated 2 years ago
• kkent030315 / kernel_callbacks
  Bypasses for Windows kernel callbacks PatchGuard protection
  ☆44Updated 4 years ago
• archercreat / vdk
  vdk is a set of utilities used to help with exploitation of a vulnerable driver.
  ☆46Updated 3 years ago
• Iizerd / BDASM
  Binary DisASseMbler
  ☆24Updated 3 years ago
• NewWorldComingSoon / UnknownField
  UnknownField is a tool based clang that obfuscating the order of fields to protect your C/C++ game or code.
  ☆44Updated 3 years ago
• Gbps / CapcomLib
  A reflexive driver loader to bypass Windows DSE (featuring a custom PE loader)
  ☆43Updated 7 years ago
• KiFilterFiberContext / VMP3-Disasm
  Experimental disassembler for x86 binaries virtualized by VMProtect 3
  ☆97Updated 3 years ago
• boom-cr3 / NotifyRoutineHijackThread
  Hijack NotifyRoutine for a kernelmode thread
  ☆41Updated 3 years ago
• samshine / ScyllaHideDetector2
  Allows you to find the use of ScyllaHide, if your program will debug and restore hooking functions bytes.
  ☆26Updated 6 years ago
• therealdreg / ida_vmware_windows_gdb
  Helper script for Windows kernel debugging with IDA Pro on VMware + GDB stub (including PDB symbols)
  ☆68Updated 2 years ago
• RIscRIpt / wdmcpp
  Visual Studio Project example for using Microsoft's STL in WDM (Windows Kernel-mode Driver)
  ☆25Updated 4 years ago