Alternatives and similar repositories for anti-debugging:

Users that are interested in anti-debugging are comparing it to the libraries listed below

• mike1k / perses
  X86 Mutation Engine with Portable Executable compatibility.
  ☆479Updated 2 years ago
• mike1k / HookHunter
  Analyze patches in a process
  ☆249Updated 3 years ago
• hfiref0x / WubbabooMark
  Debugger Anti-Detection Benchmark
  ☆310Updated last year
• Xyrem / Yumekage
  Demo proof of concept for shadow regions, and implementation of HyperDeceit.
  ☆276Updated last year
• kkent030315 / anycall
  x64 Windows kernel code execution via user-mode, arbitrary syscall, vulnerable IOCTLs demonstration
  ☆287Updated 2 years ago
• crvvdev / MasterHide
  A x64 Windows Rootkit using SSDT or Hypervisor hook
  ☆533Updated 2 months ago
• M-r-J-o-h-n / SWH-Injector
  An Injector that can inject dll into game process protected by anti cheat using SetWindowsHookEx.
  ☆242Updated 5 years ago
• revsic / AntiDebugging
  AntiDebugging sample sources written in C++
  ☆337Updated 6 years ago
• Cr4sh / KernelForge
  A library to develop kernel level Windows payloads for post HVCI era
  ☆392Updated 3 years ago
• charliewolfe / Stealthy-Kernelmode-Injector
  Manual mapper that uses PTE manipulation, Virtual Address Descriptor (VAD) manipulation, and forceful memory allocation to hide executabl…
  ☆309Updated 3 years ago
• nelfo / Milfuscator
  x86 PE Mutator
  ☆216Updated 2 years ago
• d35ha / xObf
  Simple x86/x86_64 instruction level obfuscator based on a basic SBI engine
  ☆264Updated 2 years ago
• notscimmy / libelevate
  Handle elevation DKOM against ObRegisterCallbacks
  ☆291Updated 6 years ago
• alexvogt91 / Kernel-dll-injector
  Kernel-Mode Driver that loads a dll into every new created process that loads kernel32.dll module
  ☆412Updated 6 years ago
• notpidgey / EagleVM
  Native code virtualizer for x64 binaries
  ☆469Updated 2 months ago
• VollRagm / lpmapper
  A mapper that maps shellcode into loaded large page drivers
  ☆260Updated 2 years ago
• mactec0 / Kernelmode-manual-mapping-through-IAT
  Manual mapping without creating any threads, with rw only access
  ☆730Updated 5 years ago
• VollRagm / PTView
  Browse Page Tables on Windows (Page Table Viewer)
  ☆195Updated 2 years ago
• Barracudach / CallStack-Spoofer
  This tool will allow you to spoof the return addresses of your functions as well as system functions.
  ☆441Updated 2 years ago
• anzelesnik / SyscallHook
  System call hook for Windows 10 20H1
  ☆487Updated 3 years ago
• thesecretclub / SandboxBootkit
  Bootkit for Windows Sandbox to disable DSE/PatchGuard.
  ☆271Updated 5 months ago
• thesecretclub / window_hijack
  Rendering on external windows via hijacking thread contexts
  ☆381Updated 4 years ago
• btbd / umap
  UEFI bootkit for driver manual mapping
  ☆532Updated last year
• vmcall / nt-mapper
  C++17 PE manualmapper
  ☆329Updated 3 years ago
• JustasMasiulis / inline_syscall
  Inline syscalls made easy for windows on clang
  ☆694Updated 8 months ago
• Zer0Mem0ry / KernelReadWriteMemory
  Simple code to manipulate the memory of a usermode process from kernel.
  ☆274Updated 8 years ago
• Zer0Mem0ry / ManualMap
  A Simple demonstration of manual dll injector
  ☆201Updated 3 years ago
• armvirus / SinMapper
  usermode driver mapper that forcefully loads any signed kernel driver (legit cert) with a big enough section (example: .data, .rdata) to …
  ☆406Updated 3 years ago
• adrianyy / kernelhook
  Windows inline hooking tool.
  ☆249Updated 6 years ago
• notscimmy / pplib
  Elevate a process to be a protected process
  ☆144Updated 5 years ago