Alternatives and similar repositories for kli-ex

Users that are interested in kli-ex are comparing it to the libraries listed below

• 1hAck-0 / zeroimport

  View on GitHub
  ZeroImport is a lightweight and easy to use C++ library for Windows Kernel Drivers. It allows you to hide any import in your kernel drive…
  ☆50Mar 22, 2023Updated 2 years ago
• yuaom / DSEDodge-Signed-Kernel-Driver

  View on GitHub
  Leveraging Platform Trust Technology (PTT) to defeat Driver Signing Enforcement (DSE) to run Kernel Drivers (KMDF) with Secure Boot Enabl…
  ☆13Aug 22, 2022Updated 3 years ago
• ekknod / Nmi

  View on GitHub
  Old way for blocking NMI interrupts
  ☆29Sep 6, 2022Updated 3 years ago
• Air14 / SymbolicAccess

  View on GitHub
  Static user/kernel mode library that allows access to all functions and global variables by extracting offsets from the PDB
  ☆117May 29, 2025Updated 8 months ago
• hypervisor / kli

  View on GitHub
  Kernel Lazy Importer
  ☆130Apr 13, 2024Updated last year
• MapleSwan / PageTableHook

  View on GitHub
  ☆144Dec 10, 2022Updated 3 years ago
• rmccrystal / winkernel-rs

  View on GitHub
  Utility functions for building Windows kernel drivers in Rust
  ☆21Nov 16, 2021Updated 4 years ago
• user23333 / veh

  View on GitHub
  VEH debug plugin
  ☆13Apr 28, 2022Updated 3 years ago
• alfarom256 / UserVAtoPhysical

  View on GitHub
  Walks the Process' VAD list to grab the PTE's corresponding to a usermode virtual address, all to get the physical address
  ☆23Nov 22, 2021Updated 4 years ago
• VollRagm / PTView

  View on GitHub
  Browse Page Tables on Windows (Page Table Viewer)
  ☆234Apr 2, 2022Updated 3 years ago
• KANKOSHEV / Detect-HiddenThread-via-KPRCB

  View on GitHub
  Detect removed thread from PspCidTable.
  ☆75Mar 18, 2022Updated 3 years ago
• xPasters / .data-ptr-swap

  View on GitHub
  i stole this from some guys private repo on github
  ☆58Jul 11, 2021Updated 4 years ago
• DErDYAST1R / NmiCallbackBlocker

  View on GitHub
  Kernel Level NMI Callback Blocker
  ☆160Sep 27, 2025Updated 4 months ago
• Peribunt / Ret-Spoofing

  View on GitHub
  A minimalistic way to spoof return addresses without using exceptions
  ☆17Jul 26, 2022Updated 3 years ago
• ioncodes / rapid-kdbg-hyperv

  View on GitHub
  ☆15Mar 13, 2023Updated 2 years ago
• gabriellandau / CISpotter

  View on GitHub
  Code Integrity Violation Spotter
  ☆17Jun 11, 2024Updated last year
• nulledc0de / phantom_thread

  View on GitHub
  POC kernel driver with hidden system thread
  ☆13May 14, 2024Updated last year
• stuxnet147 / luna-1

  View on GitHub
  ☆17Dec 18, 2020Updated 5 years ago
• zer0mem / VadScanner

  View on GitHub
  PoC of BOOST-ed _EPROCESS.VadRoot iterating
  ☆27May 21, 2014Updated 11 years ago
• SurgeGotTappedAgain / Pink-Eye

  View on GitHub
  ☆59Mar 14, 2023Updated 2 years ago
• 1401199262 / HookSwapContext

  View on GitHub
  ☆34Apr 11, 2023Updated 2 years ago
• vmcall / nt

  View on GitHub
  NT reversal
  ☆25Jul 12, 2018Updated 7 years ago
• Deputation / hygieia

  View on GitHub
  Hygieia, a vulnerable driver traces scanner written in C++ as an x64 Windows kernel driver.
  ☆151Feb 12, 2022Updated 4 years ago
• ekknod / acdrv

  View on GitHub
  base for testing
  ☆186Sep 28, 2024Updated last year
• ooodummy / renderer

  View on GitHub
  D3D11 Renderer
  ☆17May 12, 2024Updated last year
• EBalloon / Rw-No-Attach

  View on GitHub
  ☆159May 21, 2024Updated last year
• 1401199262 / NMIStackWalk

  View on GitHub
  ☆73Aug 31, 2022Updated 3 years ago
• weak1337 / copy_call

  View on GitHub
  ☆23Oct 18, 2021Updated 4 years ago
• lennyRBLX / manual_exception_handling

  View on GitHub
  Handling C++ & __try exceptions without the need of built-in handlers.
  ☆77Aug 28, 2021Updated 4 years ago
• EBalloon / Remap

  View on GitHub
  ☆49Feb 21, 2022Updated 3 years ago
• HyperSine / siren-hypervisor

  View on GitHub
  ☆39Mar 23, 2023Updated 2 years ago
• EBalloon / MapPage

  View on GitHub
  Mapping your code on a 0x1000 size page
  ☆71May 20, 2022Updated 3 years ago
• TheCruZ / CommonCheatingSnippets

  View on GitHub
  ☆58Dec 20, 2023Updated 2 years ago
• Deputation / syscall_extractor

  View on GitHub
  A C++ syscall ID extractor for Windows. Developed, debugged and tested on 20H2.
  ☆21May 25, 2021Updated 4 years ago
• p3sik / samoware_public

  View on GitHub
  ☆16Mar 13, 2023Updated 2 years ago
• stuxnet147 / Win-Kernel-PiDqSerializationWrite-Example

  View on GitHub
  How to use PiDqSerializationWrite. Introduces how to safely read and write from mapped driver
  ☆26May 29, 2023Updated 2 years ago
• 1401199262 / Hook-KdTrap

  View on GitHub
  ☆223Mar 11, 2023Updated 2 years ago
• donnaskiez / nmi

  View on GitHub
  nmi stackwalking + module verification
  ☆157Dec 28, 2023Updated 2 years ago
• sariaki / amd-hypervisor

  View on GitHub
  a minimalistic windows hypervisor for amd processors
  ☆138Jun 30, 2022Updated 3 years ago