killvxk / DisableWin10PatchguardPoc

Related projects ⓘ

Alternatives and complementary repositories for DisableWin10PatchguardPoc

• zhuhuibeishadiao / NewHideDriverEx
  Hide Driver By MiProcessLoaderEntry
  ☆281Updated 5 years ago
• tandasat / PgResarch
  PatchGuard Research
  ☆292Updated 6 years ago
• tandasat / SimpleSvmHook
  SimpleSvmHook is a research purpose hypervisor for Windows on AMD processors.
  ☆356Updated 3 years ago
• stonedreamforest / Mirage
  kernel-mode Anti-Anti-Debug plugin. based on intel vt-x && ept technology
  ☆429Updated 4 years ago
• hrbust86 / HookMsrBySVM
  hook msr by amd svm
  ☆119Updated 4 years ago
• KelvinMsft / kHypervisor
  kHypervisor is a lightweight bluepill-like nested VMM for Windows, it provides and emulating a basic function of Intel VT-x
  ☆413Updated 2 years ago
• zhuhuibeishadiao / PFHook
  Page fault hook use ept (Intel Virtualization Technology)
  ☆175Updated 8 years ago
• MiroKaku / libwsk
  The Kernel-Mode Winsock library, supporting TCP, UDP and Unix sockets (DGRAM and STREAM).
  ☆232Updated 7 months ago
• Air14 / airhv
  Simple Intel VT-x hypervisor
  ☆264Updated 11 months ago
• zouxianyu / KernelHiddenExecute
  Hide codes/data in the kernel address space.
  ☆185Updated 3 years ago
• stonedreamforest / NaiHeQiao
  open-source x86/x64 usermode anti-anti-debug plugin
  ☆215Updated 4 years ago
• fIappy / infhook19041
  ☆121Updated 4 years ago
• KelvinMsft / ThreadSpy
  ☆151Updated 4 years ago
• strivexjun / DriverInjectDll
  Using Driver Global Injection dll, it can hide DLL modules
  ☆506Updated 5 years ago
• FiYHer / InfinityHookPro
  InfinityHookPro Win7 -> Win11 latest
  ☆496Updated last year
• ChengChengCC / Ark-tools
  Windows Ark 工具的工程和一些demo
  ☆185Updated 8 years ago
• strivexjun / XAntiDebug
  VMProtect 3.x Anti-debug Method Improved
  ☆522Updated 5 years ago
• anzelesnik / SyscallHook
  System call hook for Windows 10 20H1
  ☆481Updated 3 years ago
• AzureGreen / ArkProtect
  An Ark tool project，run on Win7 x86/x64
  ☆110Updated 7 years ago
• hzqst / Syscall-Monitor
  Syscall Monitor is a system monitor program (like Sysinternal's Process Monitor) using Intel VT-X/EPT for Windows7+
  ☆722Updated 7 years ago
• can1357 / ByePg
  Defeating Patchguard universally for Windows 8, Windows 8.1 and all versions of Windows 10 regardless of HVCI.
  ☆845Updated 5 years ago
• Sqdwr / HideDriver
  之前那份是7600的，每次编译搞得好麻烦。更新一个VS2017可以直接编译的。
  ☆142Updated 5 years ago
• sud01oo / ProcessInjection
  Some ways to inject a DLL into a alive process
  ☆353Updated 6 years ago
• SamLarenN / CPUZ-DSEFix
  Exploiting CPU-Z Driver To Turn Load Unsigned Drivers
  ☆125Updated 7 years ago
• tishion / mmLoader
  A library for loading dll module bypassing windows PE loader from memory (x86/x64)
  ☆536Updated 8 months ago
• not-wlan / drvmap
  driver mapper / capcom wrapper
  ☆215Updated 5 years ago
• changeofpace / Self-Remapping-Code
  This program remaps its image to prevent the page protection of pages contained in the image from being modified via NtProtectVirtualMemo…
  ☆563Updated 5 years ago
• wbenny / DetoursNT
  Detours with just single dependency - NTDLL
  ☆612Updated 2 years ago
• zzhouhe / PG1903
  ☆108Updated 5 years ago