hid3rx/GhostWriting external links

---

GitHub - View repository

GitHub.dev - Open in online code editor

Star history - Growth chart over time

deps.dev - Dependencies and security vulnerabilities

Gitingest - Export source code for LLM usage

Repomix - Export source code for LLM usage

uithub - Export source code for LLM usage

Close

hid3rx/GhostWriting

Readme badge preview -

If you own this repo, copy the snippet below and add it to your README.md

---

Copy

[![RelatedRepos](https://img.shields.io/badge/related-repos-yellow)](https://relatedrepos.com/gh/hid3rx/GhostWriting)

Close

hid3rx / GhostWritingView on GitHubMore

• External links
• Readme badge

☆34Aug 7, 2023Updated 2 years ago

Alternatives and similar repositories for GhostWriting

Users that are interested in GhostWriting are comparing it to the libraries listed below

• 0xGREG / better-shellcode

  View on GitHub
  A better way to write shell code
  ☆11May 28, 2021Updated 4 years ago
• CyberSecurityExploitDevelopment / SMBLibrary

  View on GitHub
  Windows CIFS/SMB packet generation and SMB networking library
  ☆12Aug 25, 2020Updated 5 years ago
• msmania / hk

  View on GitHub
  Injector with kernel power
  ☆18Jan 2, 2021Updated 5 years ago
• Peribunt / Exception-Ret-Spoofing

  View on GitHub
  A simple way to spoof return addresses using an exception handler
  ☆44Aug 3, 2022Updated 3 years ago
• Zero-Tang / SimpleWhpDemo

  View on GitHub
  Simple Demo of using Windows Hypervisor Platform
  ☆29Jul 14, 2025Updated 8 months ago
• Tapirus-Team / xspy

  View on GitHub
  Windows system spy for Mouse, Keyboard and Gamepad(Joystick).
  ☆15Jul 6, 2022Updated 3 years ago
• m-cetin / CVE-2023-29336

  View on GitHub
  ☆21Jun 9, 2023Updated 2 years ago
• trustedsec / Windows-MS-LSAT-RPC-Example

  View on GitHub
  Windows RPC example calling stubs generated from MS-LSAT and MS-LSAD
  ☆28Jan 4, 2024Updated 2 years ago
• zer0condition / ZeroThreadKernel

  View on GitHub
  Recursive and arbitrary code execution at kernel-level without a system thread creation
  ☆159Apr 13, 2023Updated 2 years ago
• alfarom256 / HPHardwareDiagnostics-PoC

  View on GitHub
  PoC exploit for HP Hardware Diagnostic's EtdSupp driver
  ☆50May 13, 2023Updated 2 years ago
• nanabingies / x64-Page-Walker

  View on GitHub
  Walks through the 4-level paging structures in Windows x64
  ☆13Feb 12, 2023Updated 3 years ago
• bytesundso / SneakCalls

  View on GitHub
  direct systemcalls with a modern c++20 interface.
  ☆45Jan 6, 2023Updated 3 years ago
• bb107 / ServiceCall

  View on GitHub
  Interprocess communication library, providing the ability to call functions from each other
  ☆20Oct 3, 2019Updated 6 years ago
• killvxk / awesome_code_windows_kernel

  View on GitHub
  ☆17Apr 18, 2023Updated 2 years ago
• florylsk / NtDump

  View on GitHub
  Indirect NT syscalls LSASS dumper.
  ☆47Jul 9, 2023Updated 2 years ago
• helloobaby / pdbtoheader

  View on GitHub
  pdb's function and global vars to offset
  ☆10Apr 11, 2023Updated 2 years ago
• POPFD / HypervisorBase

  View on GitHub
  A library for intel VT-x hypervisor functionality supporting EPT shadowing.
  ☆51Mar 11, 2021Updated 5 years ago
• alfarom256 / MinifilterResearch

  View on GitHub
  ☆17Oct 31, 2022Updated 3 years ago
• myzxcg / BypassUAC-Dll

  View on GitHub
  Use COM Component Bypass UAC,Dll Version
  ☆36Apr 17, 2021Updated 4 years ago
• silentwarble / hbin_template

  View on GitHub
  Post-Ex BOF tooling for Hannibal
  ☆24Nov 20, 2024Updated last year
• clownfive / CppDevShellcode

  View on GitHub
  使用Visral Studio开发ShellCode
  ☆236Oct 11, 2023Updated 2 years ago
• vifreex / AzShell

  View on GitHub
  Azure APIs enumeration and abuse
  ☆12Feb 26, 2026Updated 3 weeks ago
• HaydoW / NerfDefender

  View on GitHub
  BOF and C++ implementation of the Windows Defender sandboxing technique described by Elastic Security Labs/Gabriel Landau.
  ☆24Jul 5, 2023Updated 2 years ago
• Updating1337 / Serotonin-Rust-Source

  View on GitHub
  ☆13Dec 10, 2023Updated 2 years ago
• mrexodia / zeromcp

  View on GitHub
  Zero-dependency MCP server implementation.
  ☆74Feb 23, 2026Updated 3 weeks ago
• SamuelTulach / eac_cr3_shuffle

  View on GitHub
  ☆91Oct 6, 2023Updated 2 years ago
• bb107 / RtlWow64

  View on GitHub
  c++ implementation of windows heavens gate
  ☆71Feb 12, 2021Updated 5 years ago
• andyvand / msirda

  View on GitHub
  Microsoft decompiled IrDA drivers
  ☆16Apr 15, 2015Updated 10 years ago
• Y3A / CVE-2023-28229

  View on GitHub
  ☆137Jan 8, 2024Updated 2 years ago
• tandasat / CVE-2022-25949

  View on GitHub
  A years-old exploit of a local EoP vulnerability in Kingsoft Antivirus KWatch Driver version 2009.3.17.77.
  ☆38Mar 16, 2022Updated 4 years ago
• Neo-Maoku / MultiTshProxy

  View on GitHub
  tsh多终端代理通信
  ☆19Feb 26, 2025Updated last year
• xtremegamer1 / Illicit-memory-allocation

  View on GitHub
  This driver hooks a device object for ioctl and uses mdls to allocate physical pages and manually injects an entry into a process's page …
  ☆15Feb 14, 2023Updated 3 years ago
• crisprss / magicDiagTrack

  View on GitHub
  DiagTrack Eop (From Service Account to SYSTEM)
  ☆24Jan 13, 2023Updated 3 years ago
• IlayTheVuln / Kernelious-Rootkit

  View on GitHub
  a dkom rootkit that targets windows x64 systems. the rootkit hooks and edits criticl memory sections in order to hide different resources…
  ☆19Jul 5, 2023Updated 2 years ago
• csandker / RPCDump

  View on GitHub
  ☆85Jan 12, 2022Updated 4 years ago
• iammaguire / Salient-Rootkit

  View on GitHub
  A kernel mode Windows rootkit in development.
  ☆49Dec 31, 2021Updated 4 years ago
• nptr / no-crt-template

  View on GitHub
  simple c++ visual studio project that doesn't use the C/C++ runtime
  ☆27May 31, 2018Updated 7 years ago
• VirtualAlllocEx / Shell-we-Assembly

  View on GitHub
  Shellcode execution via x86 inline assembly based on MSVC syntax
  ☆17Apr 26, 2023Updated 2 years ago
• luciouskami / shadowMap

  View on GitHub
  bypass CRC
  ☆12May 3, 2018Updated 7 years ago