Alternatives and similar repositories for IsKernelDebuggerPresent

Users that are interested in IsKernelDebuggerPresent are comparing it to the libraries listed below

• h4xu3lyn / FuckPg
  Analysing and defeating PatchGuard universally
  ☆36Updated 5 years ago
• KelvinMsft / UsbMon
  ☆39Updated 5 years ago
• amiryeshurun / HyperWin-Communication-Driver
  A driver that supports communication between a Windows guest and HyperWin
  ☆15Updated 5 years ago
• Vicshann / PEProtectDrv
  Some crazy PE executables protection kernel driver
  ☆20Updated 5 years ago
• gigabitwize / dank
  Driver Loader/BE Bypass/Win Malware(lol)
  ☆36Updated 6 years ago
• BrunoMCBraga / Kernel-Whisperer
  ☆29Updated 5 years ago
• MiroKaku / ConMon
  Windows Console Monitor
  ☆34Updated 6 years ago
• tcpie / hook_any_x64
  Easily hook WIN32 x64 functions
  ☆18Updated 11 months ago
• Peribunt / Wow64-HeavensGate
  Basic utilities for executing, reading and writing 64-bit data in a 32-bit WoW64 process
  ☆18Updated 3 years ago
• zhuhuibeishadiao / KernelHooksDetection_x64
  x64 Kernel Hooks Detection
  ☆24Updated 9 years ago
• anzelesnik / MySyscall
  Example of hijacking system calls via function pointer tables
  ☆31Updated 4 years ago
• Rat431 / ColdKernel_KUSER
  A simple kernel mode driver that hooks some values at the KUSER_SHARED_DATA structure.
  ☆27Updated 6 years ago
• moukayz / KernelDriverDemo
  ☆24Updated 6 years ago
• Barakat / windows.sandbox
  Windows sandbox PoC
  ☆32Updated 5 years ago
• zer0mem / VadScanner
  PoC of BOOST-ed _EPROCESS.VadRoot iterating
  ☆27Updated 11 years ago
• DOGSHITD / IDTHook_X64
  Hook IDT vector 0xb2 to detect SCI in 64bit windows.
  ☆34Updated 3 years ago
• 0xcpu / exthost
  A POC for Windows Extension Host hooking
  ☆24Updated 6 years ago
• Nerlant / SyscallDumper
  ☆19Updated 6 years ago
• AzureGreen / VAToPA
  a demo for x86/x64's paging memory management learning, convert a virtual address from ring3 to physical address in ring0
  ☆19Updated 8 years ago
• changeofpace / x64dbg-Anti-Debug-POC
  viewing page boundaries of pages with PAGE_NOACCESS protection reveals the presence of x64dbg.
  ☆26Updated 9 years ago
• Air14 / KDBGDecryptor
  A simple example how to decrypt kernel debugger data block
  ☆31Updated 4 years ago
• KelvinMsft / Perfvisor
  init
  ☆14Updated 5 years ago
• Zero-Tang / SimpleWhpDemo
  Simple Demo of using Windows Hypervisor Platform
  ☆29Updated 6 months ago
• wjcsharp / Common
  Shareds for kernel developement
  ☆29Updated 12 years ago
• yjugl / mitimon
  Monitor ETW events for Windows process mitigation policies, with stack traces
  ☆31Updated 3 years ago
• alexvogt91 / NetDriver
  kernel-mode TDI client which can send and receive HTTP requests
  ☆56Updated 7 years ago
• Iamgublin / libemu_pe
  enable libemu run pe file and add some good modify
  ☆14Updated 7 years ago
• DKingAlpha / SSDT-Index
  Ready-to-use headers for Windows Kernel SSDT indices
  ☆11Updated 5 years ago
• ajkhoury / windbg_to_c
  Translates WinDbg "dt" structure dump to a C structure
  ☆13Updated 5 years ago
• SinaKarvandi / Pinitor
  An API Monitor based on Instrumentation
  ☆44Updated 8 years ago