hrbust86 / HookMsrBySVM

Related projects: ⓘ

• fIappy / infhook19041
  ☆120Updated 4 years ago
• tandasat / FU_Hypervisor
  A hypervisor hiding user-mode memory using EPT
  ☆103Updated 6 years ago
• MiroKaku / Nt-Modules
  Collect different versions of Crucial modules.
  ☆126Updated 2 months ago
• KelvinMsft / NoTruth
  ☆92Updated 6 years ago
• zouxianyu / KernelHiddenExecute
  Hide codes/data in the kernel address space.
  ☆185Updated 3 years ago
• zhuhuibeishadiao / PFHook
  Page fault hook use ept (Intel Virtualization Technology)
  ☆172Updated 7 years ago
• MiroKaku / WDKExt
  Windows Driver Kit Extesion Header (Undoc)
  ☆132Updated 2 years ago
• zhuhuibeishadiao / PatchGuardResearch
  win10 pgContext dynamic dump (btc version)
  ☆100Updated 4 years ago
• MeeSong / KTL
  Windows Kernel Template Library
  ☆108Updated 2 years ago
• Air14 / airhv
  Simple Intel VT-x hypervisor
  ☆247Updated 9 months ago
• AzureGreen / ArkProtect
  An Ark tool project，run on Win7 x86/x64
  ☆107Updated 7 years ago
• KelvinMsft / ThreadSpy
  ☆148Updated 3 years ago
• wbaby / ntoskrnl
  ☆135Updated this week
• can1357 / physical_mem_controller
  A library to read physical memory and system-wide virtual memory.
  ☆119Updated 6 years ago
• zzhouhe / PG1903
  ☆105Updated 4 years ago
• not-wlan / driver-hijack
  ☆150Updated 4 years ago
• armasm / EasyAntiPatchGuard
  Easy Anti PatchGuard
  ☆212Updated 3 years ago
• MiroKaku / libwsk
  The Kernel-Mode Winsock library, supporting TCP, UDP and Unix sockets (DGRAM and STREAM).
  ☆226Updated 5 months ago
• KelvinMsft / DeviceMon
  VT-based PCI device monitor (SPI)
  ☆149Updated 3 years ago
• secrary / Hooking-via-InstrumentationCallback
  codes for my blog post: https://secrary.com/Random/InstrumentationCallback/
  ☆165Updated 6 years ago
• huoji120 / huoji_debuger
  ayy debuger
  ☆87Updated 6 months ago
• zhuhuibeishadiao / NewHideDriverEx
  Hide Driver By MiProcessLoaderEntry
  ☆279Updated 5 years ago
• arielkoren / DisablePatchGuard
  disable most common windowsx64 systems patchguard
  ☆82Updated 5 years ago
• can1357 / vmware-rpc
  Header-only VMWare Backdoor API Implementation & Effortless VMX Patcher for Custom Guest-to-Host RPCs
  ☆96Updated 3 years ago
• markhc / windbg_to_c
  Translates WinDbg "dt" structure dump to a C structure
  ☆126Updated 7 years ago
• zouxianyu / PhysicalMemoryRW
  the basic version of the ring0 physical memory read/write tool
  ☆86Updated 5 years ago
• Ido-Moshe-Github / CiDllDemo
  Use ci.dll API for validating Authenticode signature of files
  ☆124Updated 2 years ago
• Sqdwr / HideDriver
  之前那份是7600的，每次编译搞得好麻烦。更新一个VS2017可以直接编译的。
  ☆141Updated 5 years ago
• tandasat / GuardMon
  Hypervisor based tool for monitoring system register accesses.
  ☆140Updated 6 years ago
• btbd / wpp
  Intercepting DeviceControl via WPP
  ☆125Updated 4 years ago