x64 Windows implementation of virtual-address to physical-address translation
☆53Jun 3, 2021Updated 5 years ago
Alternatives and similar repositories for anyvtop
Users that are interested in anyvtop are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- x64 Windows privilege elevation using anycall☆22May 28, 2021Updated 5 years ago
- Two PoC of accessing process virtual memory via NT Kernel☆21Jun 25, 2021Updated 5 years ago
- Code Injection, Inject malicious payload via pagetables pml4.☆244Jul 7, 2021Updated 5 years ago
- Windows system spy for Mouse, Keyboard and Gamepad(Joystick).☆15Jul 6, 2022Updated 4 years ago
- Walks the Process' VAD list to grab the PTE's corresponding to a usermode virtual address, all to get the physical address☆22Nov 22, 2021Updated 4 years ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- a dumb rpm/wpm example driver☆14Jun 7, 2021Updated 5 years ago
- POC Hook of nt!HvcallCodeVa☆53May 8, 2023Updated 3 years ago
- it's a driver injector or driver loader header lib(Windows)☆13Aug 5, 2023Updated 3 years ago
- x64 Windows kernel driver mapper, inject unsigned driver using anycall☆223Feb 14, 2024Updated 2 years ago
- Command like tool to print mitigation flags for running processes in a memory dump☆48Sep 18, 2020Updated 5 years ago
- Bypasses for Windows kernel callbacks PatchGuard protection☆44Aug 15, 2021Updated 5 years ago
- x64 Windows kernel code execution via user-mode, arbitrary syscall, vulnerable IOCTLs demonstration☆418Jul 6, 2022Updated 4 years ago
- IO隐藏通信封装☆17May 31, 2021Updated 5 years ago
- A kernelmode driver swapping a .data pointer in the kernel to perform communication between the kernel and usermode.☆136Oct 20, 2020Updated 5 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- VEH debug plugin☆14Apr 28, 2022Updated 4 years ago
- Bypassing kernel patch protection at runtime☆22Aug 16, 2026Updated last week
- A driver that supports communication between a Windows guest and HyperWin☆15Jan 6, 2021Updated 5 years ago
- A specially crafted IOCTL can be issued to the rzpnk.sys driver in Razer Synapse 2.20.15.1104 that is forwarded to ZwOpenProcess allowing…☆13Nov 8, 2020Updated 5 years ago
- Hook NtDeviceIoControlFile with PatchGuard☆104May 10, 2022Updated 4 years ago
- Example of reading process memory through kernel special APC☆112Apr 21, 2023Updated 3 years ago
- Hypervisor based tool for monitoring system register accesses.☆157Sep 13, 2018Updated 7 years ago
- x64 Windows PatchGuard bypass, register process-creation callbacks from unsigned code☆209May 27, 2021Updated 5 years ago
- Libraries written in inline assembly☆19Aug 7, 2023Updated 3 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- ☆45Nov 26, 2020Updated 5 years ago
- Detects if a Kernel mode debugger is active by reading the value of KUSER_SHARED_DATA.KdDebuggerEnabled. It is a high level and portable …☆25Sep 18, 2017Updated 8 years ago
- 巨硬☆18Oct 4, 2023Updated 2 years ago
- Simple Demo of using Windows Hypervisor Platform☆29Jul 14, 2025Updated last year
- ☆42Jul 1, 2022Updated 4 years ago
- clearing traces of a loaded driver☆48Jul 2, 2022Updated 4 years ago
- Enumerate Callbacks and all Object Types☆16Jan 9, 2023Updated 3 years ago
- ☆75Dec 17, 2020Updated 5 years ago
- Rootkit & Anti-rootkit☆42Jan 27, 2024Updated 2 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- TS-Changer - Forces the machine in/out of TestSigning Mode at runtime.☆63Aug 14, 2023Updated 3 years ago
- arbitrary kernel read/write in dbutil_2_3.sys, Proof of Concept Local Privilege Escalation to nt authority/system☆59Nov 16, 2021Updated 4 years ago
- Create stealthy, inline, EPT-like hooks using SMAP and SMEP☆69Oct 19, 2024Updated last year
- Use cpp-httplib with mbedtls☆15Feb 20, 2024Updated 2 years ago
- A kernel module dumper for Windows x64 using mhyprot vulnerable driver☆36Oct 26, 2020Updated 5 years ago
- An application to view and filter pool allocations from a dmp file on Windows 10 RS5+.☆156Mar 2, 2023Updated 3 years ago
- A library for intel VT-x hypervisor functionality supporting EPT shadowing.☆50Mar 11, 2021Updated 5 years ago