Alternatives and similar repositories for Anti-Rootkit:

Users that are interested in Anti-Rootkit are comparing it to the libraries listed below

• amateurVV / AmateurVT
  ☆27Updated last year
• yqsy / VT_demo
  ☆25Updated 7 years ago
• MiroKaku / Learning-Example
  For Example. See Miro's Blog
  ☆30Updated 2 years ago
• fIappy / InfinityHook
  Hook system calls, context switches, page faults and more.
  ☆34Updated 5 years ago
• DearXiaoGui / InfinityHookPro-main
  ☆53Updated 2 years ago
• zhuhuibeishadiao / JunkDriveOpenSource
  Some garbage drivers written for getting started
  ☆64Updated 5 years ago
• luciouskami / RemoveFlagTest
  Another method to anti ThreadHideFromDebugger
  ☆36Updated 6 years ago
• zhuhuibeishadiao / WskHttp
  Windows kernel drivers simple HTTP library for modern C++
  ☆42Updated 6 years ago
• FiYHer / dxgkrnl_hook_ex
  以前改进的cheat内核通信模块,现在EAC Detected,现在发出来
  ☆52Updated 3 years ago
• gmh5225 / kcpplib
  The driver STL library used by myself
  ☆12Updated 2 years ago
• Oxygen1a1 / DrvMon
  a monitoring windows driver calls kernel api tools
  ☆103Updated 8 months ago
• haidragon / NewInjectDrv
  APC注入DLL内核层
  ☆23Updated 6 years ago
• KelvinMsft / PerfMon
  first commit
  ☆58Updated 4 years ago
• ilovecsad / veh_hide_memory
  ☆69Updated 3 years ago
• gmh5225 / FakeEnclave
  A poc that abuses Enclave
  ☆37Updated 2 years ago
• kanren3 / libalpc
  ☆15Updated 5 months ago
• DragonQuestHero / QT-Process-Protect
  GUI Kernel driver process protect tool
  ☆36Updated 6 years ago
• Broihon / Symbol-Parser
  Small class to parse debug info from PEs, download their respective PDBs from the Microsoft Public Symbol Server and calculate RVAs of fu…
  ☆43Updated 2 years ago
• 9176324 / Daat
  a simple intel vt code both support x86 & x64. PatchGuard monitor.
  ☆75Updated 3 years ago
• stdhu / windows-kernel-pagehook
  windows kernel pagehook
  ☆39Updated 2 years ago
• samshine / VoyagerWithEPT
  ☆34Updated 2 years ago
• xia0ji233 / KACE
  Emulate Drivers in RING3 with self context mapping or unicorn
  ☆28Updated 3 months ago
• fIappy / FpVTProject
  intel vt-x hypervisor ept
  ☆25Updated 4 years ago
• 3499409631 / ReadPhysicalMemory-Without-API
  This project can bypass most of the AC except for some perverts that enable VT to monitor page tables
  ☆40Updated 10 months ago
• nmgwddj / A-Protect
  ☆23Updated 7 years ago
• Oxygen1a1 / InfinityHookClass
  EtwHook for win7-win11;
  ☆22Updated 2 years ago
• anzelesnik / MySyscall
  Example of hijacking system calls via function pointer tables
  ☆32Updated 3 years ago
• Rythorndoran / PageTableHook
  ☆128Updated 2 years ago
• KelvinMsft / UsbMon
  ☆34Updated 4 years ago
• bronzeMe / SSDT_Hook_x64
  ☆36Updated 8 years ago