Alternatives and similar repositories for metamorphic_polymorphic:

Users that are interested in metamorphic_polymorphic are comparing it to the libraries listed below

• Tserith / Parasite
  Compact MBR Bootkit for Windows
  ☆45Updated 3 years ago
• NotRequiem / antidbg
  C/C++ antidebugging library for Windows
  ☆17Updated 2 months ago
• xsh3llsh0ck / ResilienceKit
  Another UEFI runtime bootkit
  ☆29Updated last year
• loneicewolf / KernelMode-Code
  2022 Updated Kernelmode-Code
  ☆31Updated last year
• 1hAck-0 / zeroimport
  ZeroImport is a lightweight and easy to use C++ library for Windows Kernel Drivers. It allows you to hide any import in your kernel drive…
  ☆48Updated 2 years ago
• shaygitub / windows-rootkit
  windows rootkit
  ☆58Updated 11 months ago
• therealdreg / windbgtocstruct
  Helper Script to convert a Windbg dumped structure (using the 'dt' command) into a C structure. It creates dummy structs for you if neede…
  ☆26Updated last year
• therealdreg / cgaty
  Hooking the GDT - Installing a Call Gate. POC for Rootkit Arsenal Book Second Edition (version 2022)
  ☆70Updated last year
• ch3rn0byl / CVE-2021-21551
  ☆26Updated 3 years ago
• greyb1t / GreyM
  Me fockin' pe protector
  ☆45Updated 2 years ago
• t3ssellate / unmapper
  An automatic tool for fixing dumped PE files
  ☆41Updated 4 years ago
• Lima-X / XOrCryptEx
  XOrCryptEx lightweight C Utility/Algorithm
  ☆11Updated 3 years ago
• 0mWindyBug / MinifilterHook
  silence file system monitoring components by hooking their minifilters
  ☆56Updated last year
• irql / nokd
  reverse engineering of the windows nt kernel debugger protocol & reimplementation.
  ☆23Updated 9 months ago
• xsh3llsh0ck / PicoHook
  Small driver that uses alternative syscalls feature (the project is still under development).
  ☆15Updated 11 months ago
• Shhoya / Shh0yaKernelHook
  Shh0ya Kernel Hook Driver
  ☆21Updated 4 years ago
• anzelesnik / MySyscall
  Example of hijacking system calls via function pointer tables
  ☆32Updated 3 years ago
• therealdreg / ida_vmware_windows_gdb
  Helper script for Windows kernel debugging with IDA Pro on VMware + GDB stub (including PDB symbols)
  ☆63Updated last year
• mrexodia / MBR
  EDR PoC WIP LLC
  ☆11Updated last year
• ByteWhite1x1 / PatchGuardResearch
  Bypassing kernel patch protection runtime
  ☆20Updated 2 years ago
• worawit / malk
  Demonstrate calling a kernel function and handle process creation callback against HVCI
  ☆53Updated 2 years ago
• backengineering / msrexec
  Elevate arbitrary MSR writes to kernel execution.
  ☆33Updated last year
• mzakocs / CVE-2021-21551-POC
  An extended proof-of-concept for the CVE-2021-21551 Dell ‘dbutil_2_3.sys’ Kernel Exploit
  ☆24Updated 3 years ago
• DanielAvinoam / TheSubZeroProject
  A multi-staged malware that contains a kernel mode rootkit and a remote system shell.
  ☆72Updated 3 years ago
• buzzer-re / BulletTrain
  A manual PE mapping implementation, aka reflective loader
  ☆19Updated 2 years ago
• 0mWindyBug / KeystrokeSniffer
  a windows kernel keylogger that works
  ☆21Updated last year
• backengineering / pdbgen2
  Generate a PDB file given the old PDB file and an address mapping
  ☆44Updated 3 weeks ago
• TheDuchy / rdtsc-cpuid-vm-check
  PoC that measures how long it takes the CPU to execute the CPUID instruction and reports if it suspects a VM. Works on both Windows and L…
  ☆25Updated 4 years ago
• DErDYAST1R / SilentFunctionCaller
  Allows for same-file KernelMode function execution using Encrypted addresses of Functions
  ☆33Updated 5 months ago
• DenuvoSoftwareSolutions / DVRT
  How Meltdown and Spectre haunt Anti-Cheat: DVRT details
  ☆21Updated 7 months ago