huoji120/Etw-Syscall external links

---

GitHub - View repository

GitHub.dev - Open in online code editor

Star history - Growth chart over time

deps.dev - Dependencies and security vulnerabilities

Gitingest - Export source code for LLM usage

Repomix - Export source code for LLM usage

uithub - Export source code for LLM usage

Close

huoji120/Etw-Syscall

Readme badge preview -

If you own this repo, copy the snippet below and add it to your README.md

---

Copy

[![RelatedRepos](https://img.shields.io/badge/related-repos-yellow)](https://relatedrepos.com/gh/huoji120/Etw-Syscall)

Close

huoji120 / Etw-SyscallView on GitHubMore

• External links
• Readme badge

https://key08.com/index.php/2021/10/19/1375.html

☆70May 11, 2022Updated 4 years ago

Alternatives and similar repositories for Etw-Syscall

Users that are interested in Etw-Syscall are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.

• huoji120 / cpu_duck

  View on GitHub
  关于intel和amd指令行为不一样这件事
  ☆57Apr 15, 2022Updated 4 years ago
• yottaawesome / basic-windows-drivers

  View on GitHub
  Basic experimentation with Windows drivers.
  ☆19Mar 3, 2023Updated 3 years ago
• huoji120 / MakeInfinityHookGreatAgain

  View on GitHub
  让Etwhook再次伟大! Make InfinityHook Great Again!
  ☆147Jun 24, 2021Updated 5 years ago
• huoji120 / Microsoft_Kernel_Memory_Leak

  View on GitHub
  win32kbase!NtDCompositionCommitSynchronizationObject and win32kbase!NtGdiGetCertificate
  ☆16Oct 14, 2021Updated 4 years ago
• bb107 / RtlWow64

  View on GitHub
  c++ implementation of windows heavens gate
  ☆70Feb 12, 2021Updated 5 years ago
• Virtual machines for every use case on DigitalOcean • Ad
  Get dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
• huoji120 / mash_hypervisor

  View on GitHub
  mash hypervisor host pml4
  ☆16Jun 22, 2022Updated 4 years ago
• cs1ime / DICHook

  View on GitHub
  Hook NtDeviceIoControlFile with PatchGuard
  ☆104May 10, 2022Updated 4 years ago
• D0pam1ne705 / Direct-NtCreateUserProcess

  View on GitHub
  Call NtCreateUserProcess directly as normal.
  ☆77May 17, 2022Updated 4 years ago
• huoji120 / CowInjecter

  View on GitHub
  滥用cow机制进行全局注入
  ☆97Jan 1, 2021Updated 5 years ago
• bytesundso / SneakCalls

  View on GitHub
  direct systemcalls with a modern c++20 interface.
  ☆46Jan 6, 2023Updated 3 years ago
• huoji120 / DuckSandboxDetect

  View on GitHub
  沙箱测试,测评国内常见沙箱的代码与结论
  ☆108Jul 3, 2021Updated 5 years ago
• yjugl / mitimon

  View on GitHub
  Monitor ETW events for Windows process mitigation policies, with stack traces
  ☆30Oct 7, 2022Updated 3 years ago
• DragonQuestHero / WindowsKernelPrivateSymbolsDump

  View on GitHub
  Win7内核私有符号结构转储
  ☆69Sep 3, 2021Updated 4 years ago
• iammaguire / Salient-Rootkit

  View on GitHub
  A kernel mode Windows rootkit in development.
  ☆47Dec 31, 2021Updated 4 years ago
• Wordpress hosting with auto-scaling - Free Trial Offer • Ad
  Fully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
• Air14 / KDBGDecryptor

  View on GitHub
  A simple example how to decrypt kernel debugger data block
  ☆32Feb 8, 2021Updated 5 years ago
• Zero-Tang / SimpleWhpDemo

  View on GitHub
  Simple Demo of using Windows Hypervisor Platform
  ☆29Jul 14, 2025Updated last year
• KelvinMsft / UsbMon

  View on GitHub
  ☆39Oct 29, 2020Updated 5 years ago
• zzhouhe / x96_POC

  View on GitHub
  A poc of embedding x64 code into x86 PE file
  ☆18Sep 25, 2019Updated 6 years ago
• rtyuiow / vmware-backdoor

  View on GitHub
  vmware-backdoor
  ☆35Jul 11, 2021Updated 5 years ago
• therealdreg / pdbdump_bochs

  View on GitHub
  Dump PDB Symbols including support for Bochs Debugging Format (with wine support)
  ☆14Aug 11, 2023Updated 3 years ago
• huoji120 / numen

  View on GitHub
  简单安排一下 autochk.sys 这个rootkit
  ☆73Mar 7, 2023Updated 3 years ago
• Peribunt / Exception-Ret-Spoofing

  View on GitHub
  A simple way to spoof return addresses using an exception handler
  ☆42Aug 3, 2022Updated 4 years ago
• huoji120 / CobaltStrikeDetected

  View on GitHub
  40行代码检测到大部分CobaltStrike的shellcode
  ☆292Jul 25, 2021Updated 5 years ago
• Managed hosting for WordPress and PHP on Cloudways • Ad
  Managed hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
• huoji120 / goodeye

  View on GitHub
  https://githacks.org/Shawick/goodeye.git
  ☆55Sep 2, 2020Updated 5 years ago
• A-Normal-User / NtSocket_NtClient_NtServer

  View on GitHub
  Using NtCreateFile and NtDeviceIoControlFile to realize the function of winsock（利用NtCreateFile和NtDeviceIoControlFile 实现winsock的功能）
  ☆130Sep 9, 2022Updated 3 years ago
• 0xhido / BlueLight

  View on GitHub
  Open-source EDR kernel-component for system monitoring and DLL injection
  ☆33Nov 14, 2020Updated 5 years ago
• tcpie / hook_any_x64

  View on GitHub
  Easily hook WIN32 x64 functions
  ☆18Feb 19, 2025Updated last year
• alfarom256 / UserVAtoPhysical

  View on GitHub
  Walks the Process' VAD list to grab the PTE's corresponding to a usermode virtual address, all to get the physical address
  ☆23Nov 22, 2021Updated 4 years ago
• ntoskrnl7 / ldk

  View on GitHub
  Load Dll into Kernel space
  ☆41Jul 24, 2026Updated 3 weeks ago
• FiYHer / driver_callback_bypass_1909

  View on GitHub
  研究和移除各种内核回调,在anti anti cheat的路上越走越远
  ☆180Aug 26, 2022Updated 3 years ago
• minglinchen / Win-Drv

  View on GitHub
  windows内核安全与驱动开发代码
  ☆12Apr 4, 2020Updated 6 years ago
• CyberSecurityExploitDevelopment / SMBLibrary

  View on GitHub
  Windows CIFS/SMB packet generation and SMB networking library
  ☆12Aug 25, 2020Updated 5 years ago
• GPU virtual machines on DigitalOcean Gradient AI • Ad
  Get to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
• DragonQuestHero / Medusa

  View on GitHub
  Radical Windows ARK
  ☆255Apr 18, 2025Updated last year
• zodiacon / InfStudio

  View on GitHub
  INF Studio for easier working with driver installation files
  ☆40Nov 11, 2023Updated 2 years ago
• FaEryICE / MemScanner

  View on GitHub
  Analyze Windows x64 Kernel Memory Layout
  ☆133Nov 19, 2020Updated 5 years ago
• SDXT / MMInject

  View on GitHub
  Kernel DLL Injector using NX Bit Swapping and VAD hide for hiding injected DLL
  ☆221Nov 12, 2020Updated 5 years ago
• msmania / hk

  View on GitHub
  Injector with kernel power
  ☆18Jan 2, 2021Updated 5 years ago
• MapleSwan / PageTableHook

  View on GitHub
  ☆143Dec 10, 2022Updated 3 years ago
• A-Normal-User / Pretend_HideVirtualMemory

  View on GitHub
  利用物理内存映射，实现虚拟内存的伪隐藏
  ☆84Sep 15, 2022Updated 3 years ago