Alternatives and similar repositories for Ryujin

Users that are interested in Ryujin are comparing it to the libraries listed below

• 0xflux / Hells-Hollow
  Hells Hollow Windows 11 Rootkit technique to Hook the SSDT via Alt Syscalls
  ☆205Updated 4 months ago
• Xacone / Eneio64-Driver-Exploits
  A serie of exploits targeting eneio64.sys - Turning Physical Memory R/W into Virtual Memory R/W
  ☆108Updated 2 months ago
• 0xPrimo / KMDllInjector
  kernel-mode DLL Injector
  ☆123Updated 8 months ago
• paskalian / WID_LoadLibrary
  Reverse engineering winapi function loadlibrary.
  ☆230Updated 2 years ago
• waryas / WaryasSWHE
  Usermode exploit to bypass any AC using a 0day shatter attack.
  ☆244Updated last month
• CheckPointSW / VectoredOverloading
  ☆109Updated last month
• dmaivel / covirt
  An x86-64 code virtualizer for VM based obfuscation
  ☆160Updated last year
• badhive / stitch
  Rewrite and obfuscate code in compiled binaries
  ☆273Updated last month
• jdu2600 / CFG-FindHiddenShellcode
  Walks the CFG bitmap to find previously executable but currently hidden shellcode regions
  ☆129Updated 2 years ago
• NeoMaster831 / kurasagi
  Windows 11 24H2-25H2 Runtime PatchGuard Bypass
  ☆236Updated 2 months ago
• gabriellandau / ShadowStackWalk
  Finding Truth in the Shadows
  ☆120Updated 2 years ago
• eversinc33 / unKover
  Anti-Rootkit/Anti-Cheat Driver to uncover unbacked or hidden kernel code.
  ☆274Updated last month
• helloobaby / spoofcall
  spoof return address
  ☆79Updated 2 years ago
• Archie-osu / PowerHook
  Hooking KPRCB IdlePreselect function to gain execution inside PID 0.
  ☆73Updated 9 months ago
• djolertrk / kovid-obfuscation-passes
  A set of LLVM and GCC based plugins that perform code obfuscation.
  ☆136Updated 2 months ago
• CognisysGroup / SweetDreams
  Implementation of Advanced Module Stomping and Heap/Stack Encryption
  ☆224Updated 2 years ago
• jdu2600 / EtwTi-FluctuationMonitor
  Uses Threat-Intelligence ETW events to identify shellcode regions being hidden by fluctuating memory protections
  ☆160Updated 2 years ago
• android1337 / brkida
  C++ macro for x64 programs that breaks ida hex-rays decompiler tool.
  ☆137Updated last year
• zer0condition / Demystifying-PatchGuard
  Demystifying PatchGuard is a comprehensive analysis of Microsoft's security feature called PatchGuard, which is designed to prevent unaut…
  ☆131Updated 2 years ago
• hasherezade / thread_namecalling
  Process Injection using Thread Name
  ☆293Updated 8 months ago
• nbs32k / inline-syscall
  Inline syscalls made for MSVC supporting x64 and WOW64
  ☆192Updated 2 years ago
• wesmar / KernelResearchKit
  Windows 11 kernel research framework demonstrating DSE bypass on Windows 11 25H2 through boot-time execution. Loads unsigned drivers by s…
  ☆63Updated 3 weeks ago
• alfarom256 / HPHardwareDiagnostics-PoC
  PoC exploit for HP Hardware Diagnostic's EtdSupp driver
  ☆49Updated 2 years ago
• notcpuid / pe-packer
  x86-x64 Packer with Portable Executable compatibility.
  ☆93Updated last month
• wesmar / kvc
  KVC enables unsigned driver loading via DSE bypass (g_CiOptions patch, skci.dll hijack, SeCiCallbacks redirection) and PP/PPL manipulatio…
  ☆146Updated last month
• CaledoniaProject / drivers-binaries
  Exploitable drivers, you know what I mean
  ☆154Updated last month
• ommadawn46 / HEVD-Exploit-Win10-22H2-KVAS
  HEVD Exploit: ArbitraryWrite on Windows 10 22H2 - Bypassing KVA Shadow and SMEP via PML4 Entry Manipulation
  ☆34Updated last year
• alfarom256 / CVE-2022-3699
  Lenovo Diagnostics Driver EoP - Arbitrary R/W
  ☆175Updated 3 years ago
• AmitMoshel1 / PatchGuardEncryptorDriver
  A basic implementation of Patch Guard that I implemented, that includes integrity checks and other protection mechanisms I added.
  ☆73Updated 9 months ago
• 0xHossam / KernelCallbackTable-Injection-PoC
  Proof of Concept for manipulating the Kernel Callback Table in the Process Environment Block (PEB) to perform process injection and hijac…
  ☆266Updated last year