gognl/VMBR external links

---

GitHub - View repository

GitHub.dev - Open in online code editor

Star history - Growth chart over time

deps.dev - Dependencies and security vulnerabilities

Gitingest - Export source code for LLM usage

Repomix - Export source code for LLM usage

uithub - Export source code for LLM usage

Close

gognl/VMBR

Readme badge preview -

If you own this repo, copy the snippet below and add it to your README.md

---

Copy

[![RelatedRepos](https://img.shields.io/badge/related-repos-yellow)](https://relatedrepos.com/gh/gognl/VMBR)

Close

gognl / VMBRView on GitHubMore

• External links
• Readme badge

A VMBR (Virtual-Machine Based Rootkit) which runs a guest OS and sends the attacker its data

☆28Apr 27, 2024Updated last year

Alternatives and similar repositories for VMBR

Users that are interested in VMBR are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.

• tandasat / List-UEFI-Configuration-Tables

  View on GitHub
  List UEFI Configuration Tables
  ☆14May 23, 2024Updated last year
• kkent030315 / CiGetCertPublisherName

  View on GitHub
  An example code of CiGetCertPublisherName
  ☆16Mar 24, 2022Updated 4 years ago
• IlayTheVuln / Kernelious-Rootkit

  View on GitHub
  a dkom rootkit that targets windows x64 systems. the rootkit hooks and edits criticl memory sections in order to hide different resources…
  ☆19Jul 5, 2023Updated 2 years ago
• SHA-MRIZ / FsMinfilterHooking

  View on GitHub
  ☆33Dec 22, 2020Updated 5 years ago
• gabriellandau / CISpotter

  View on GitHub
  Code Integrity Violation Spotter
  ☆17Jun 11, 2024Updated last year
• kouzhudong / AntiHook

  View on GitHub
  Enum and Remove Hook in Windows
  ☆52Dec 11, 2025Updated 3 months ago
• bb107 / ServiceCall

  View on GitHub
  Interprocess communication library, providing the ability to call functions from each other
  ☆20Oct 3, 2019Updated 6 years ago
• shaygitub / windows-rootkit

  View on GitHub
  windows rootkit
  ☆60May 2, 2024Updated last year
• y11en / lm_tools

  View on GitHub
  横向移动三剑客 ( Lateral movement tools)
  ☆30Nov 16, 2021Updated 4 years ago
• h0li3 / mpengine_diskus

  View on GitHub
  参考taviso的代码逆向一下mpengine.dll
  ☆20Jun 30, 2022Updated 3 years ago
• alfarom256 / MinifilterResearch

  View on GitHub
  ☆17Oct 31, 2022Updated 3 years ago
• MiroKaku / ConMon

  View on GitHub
  Windows Console Monitor
  ☆34Jun 11, 2019Updated 6 years ago
• waleedassar / ALPC_CLIENT_SERVER

  View on GitHub
  Demo to show how write ALPC Client & Server using native Ntdll.dll syscalls.
  ☆21Jan 25, 2022Updated 4 years ago
• Flangvik / RegPwnBOF

  View on GitHub
  Bof of RegPwn by MDSec
  ☆72Mar 15, 2026Updated last week
• kouzhudong / libdrv

  View on GitHub
  Static Library For Windows Drivers
  ☆41Dec 13, 2025Updated 3 months ago
• abhisek / afl-fuzzing-workshop

  View on GitHub
  A introductory workshop to getting started with fuzzing using american fuzzy lop (AFL)
  ☆23Oct 10, 2019Updated 6 years ago
• KANKOSHEV / Detect-HiddenThread-via-KPRCB

  View on GitHub
  Detect removed thread from PspCidTable.
  ☆75Mar 18, 2022Updated 4 years ago
• amarekano / dharmafuzz

  View on GitHub
  Fuzzing v8 with dharma and libfuzzer
  ☆13Jan 28, 2020Updated 6 years ago
• Peribunt / Exception-Ret-Spoofing

  View on GitHub
  A simple way to spoof return addresses using an exception handler
  ☆44Aug 3, 2022Updated 3 years ago
• Trantect / win-kmd-alloc

  View on GitHub
  Windows kernel-mode driver Allocator for Rust
  ☆11Oct 8, 2018Updated 7 years ago
• Nero22k / Kernel-Programming-2023

  View on GitHub
  Repository of different kernel drivers written while studying Windows NT Driver development
  ☆12Apr 14, 2024Updated last year
• andyvand / msirda

  View on GitHub
  Microsoft decompiled IrDA drivers
  ☆16Apr 15, 2015Updated 10 years ago
• nanabingies / x64-Page-Walker

  View on GitHub
  Walks through the 4-level paging structures in Windows x64
  ☆13Feb 12, 2023Updated 3 years ago
• jxy-s / vfdynf

  View on GitHub
  Application Verifier Dynamic Fault Injection
  ☆41Jan 12, 2026Updated 2 months ago
• senko37 / createprocessnotify-hook

  View on GitHub
  PsSetCreateProcessNotifyRoutine/Ex/Ex2 hook
  ☆13May 30, 2024Updated last year
• TheNNX / NNXOS64

  View on GitHub
  A 64 bit OS
  ☆10Nov 12, 2025Updated 4 months ago
• wiresock / WFPCalloutExplorer

  View on GitHub
  Simple command line tool to enumerate loaded WFP callout drivers
  ☆10Feb 2, 2024Updated 2 years ago
• zeze-zeze / 2023iThome

  View on GitHub
  ☆44Nov 18, 2024Updated last year
• codetronik / KernelV

  View on GitHub
  Rootkit & Anti-rootkit
  ☆41Jan 27, 2024Updated 2 years ago
• decoder-it / RelabelAbuse

  View on GitHub
  ☆63May 31, 2024Updated last year
• yjugl / mitimon

  View on GitHub
  Monitor ETW events for Windows process mitigation policies, with stack traces
  ☆31Oct 7, 2022Updated 3 years ago
• gerhart01 / HyperV-sockets

  View on GitHub
  Hyper-V sockets
  ☆29Sep 11, 2017Updated 8 years ago
• Sentient111 / ClearDriverTraces

  View on GitHub
  clearing traces of a loaded driver
  ☆47Jul 2, 2022Updated 3 years ago
• DKingAlpha / SSDT-Index

  View on GitHub
  Ready-to-use headers for Windows Kernel SSDT indices
  ☆11Apr 12, 2020Updated 5 years ago
• aaaddress1 / masqueradeCmdline

  View on GitHub
  A PoC to demo modifying cmdline of the child process dynamically. It might be useful against process log tracing, AV or EDR.
  ☆41Dec 31, 2020Updated 5 years ago
• ogay / rc4

  View on GitHub
  Optimized software implementation in C of the RC4 encryption algorithm.
  ☆14Mar 4, 2013Updated 13 years ago
• maxDcb / C2Core

  View on GitHub
  Core Submodule of Exploration C2
  ☆24Jan 27, 2026Updated last month
• KiFilterFiberContext / BadlionLogger

  View on GitHub
  kernel driver used to monitor the activity of BadlionAnticheat.sys by patching its IAT
  ☆32Jul 9, 2021Updated 4 years ago
• ZaweSec / KasperskyHook_NewKSDriver

  View on GitHub
  ☆34Aug 14, 2023Updated 2 years ago