Alternatives and similar repositories for win32k-mitigation

Users that are interested in win32k-mitigation are comparing it to the libraries listed below

• mtth-bfft / ntsec

  View on GitHub
  Standalone tool to explore the security model of Windows and its NT kernel. Use it to introspect privilege assignments and access right a…
  ☆33May 21, 2019Updated 6 years ago
• blackcon / HVFUZZ

  View on GitHub
  Hyper-V Fuzzer using hAFL2
  ☆11May 10, 2022Updated 3 years ago
• tpn / windows-nt-file-system-internals-book

  View on GitHub
  Source code on the 1.44MB 3.5 floppy accompanying the Windows NT File System Internals book.
  ☆20Jul 31, 2019Updated 6 years ago
• JKornev / NTlib

  View on GitHub
  Static library and headers for linking your software with ntdll.dll
  ☆38Dec 16, 2019Updated 6 years ago
• tekwizz123 / demos

  View on GitHub
  Forked from Akayan. Windows Kernel Exploitation. Static & dynamic analysis, exploits & vuln reasearch. Mitigations bypass's, genric bug-c…
  ☆16Oct 29, 2024Updated last year
• Cody2333 / SSDT_HOOK

  View on GitHub
  ssdt hook 框架的简单实现
  ☆14Jun 9, 2016Updated 9 years ago
• zodiacon / ObjDir

  View on GitHub
  Simple command line version of Sysinternals WinObj. Currently just lists object names and types given an object manager directory.
  ☆22Sep 4, 2023Updated 2 years ago
• sominsong / NIMOS

  View on GitHub
  Analysis of syscall sequence pattern from exploit codes for advanced system call sequence filtering for enhanced container security
  ☆16May 21, 2023Updated 2 years ago
• farfella / ntfs-cpu-search

  View on GitHub
  From 2011: Quickly search for files in NTFS volumes parsing the Master File Table (MFT). A decent amount of how NTFS and MFT work was pai…
  ☆29Oct 14, 2019Updated 6 years ago
• Chuyu-Team / woflib

  View on GitHub
  An open source library for operating the Windows Overlay Filter driver.
  ☆22Jan 16, 2019Updated 7 years ago
• CZashi / win-reverse

  View on GitHub
  ntos shit
  ☆30Feb 15, 2024Updated 2 years ago
• fishstiqz / poolinfo

  View on GitHub
  kernel pool windbg extension
  ☆83Jul 23, 2015Updated 10 years ago
• TautvydasZilys / FileSystemSearch

  View on GitHub
  ☆21May 24, 2022Updated 3 years ago
• krsysorg / release

  View on GitHub
  ☆11Dec 21, 2020Updated 5 years ago
• leonwxqian / windows-defender-nscript-loader

  View on GitHub
  A exe loader that can load NScript evaluation engine of Windows Defender/Microsft Security Essential. You can fuzz NScript by using this.…
  ☆28Oct 18, 2017Updated 8 years ago
• dz333n / pelauncher

  View on GitHub
  Portable Executable launcher for Windows NT bypassing loader
  ☆74Sep 4, 2025Updated 5 months ago
• SHA-MRIZ / FsMinfilterHooking

  View on GitHub
  ☆33Dec 22, 2020Updated 5 years ago
• hasherezade / IAT_patcher_samples

  View on GitHub
  Sample libraries to be used with IAT Patcher
  ☆36Oct 1, 2022Updated 3 years ago
• 0xhido / BlueLight

  View on GitHub
  Open-source EDR kernel-component for system monitoring and DLL injection
  ☆33Nov 14, 2020Updated 5 years ago
• panoramixor / GDIObjDump

  View on GitHub
  ☆29Sep 18, 2015Updated 10 years ago
• flym / array-tree-table

  View on GitHub
  基于二维数据,支持排序,支持序列化/反序列化的guava table实现
  ☆10Feb 15, 2017Updated 8 years ago
• yardenshafir / conference_talks

  View on GitHub
  Slides from various conference talks
  ☆37May 30, 2023Updated 2 years ago
• kernweak / Syscall-Monitor

  View on GitHub
  大表哥的Syscall-Monitor
  ☆34Jul 18, 2019Updated 6 years ago
• NTFSparse / ntfs_parse

  View on GitHub
  NTFS parser, plus linking capabilites between MFT LogFile and UsnJrnl
  ☆38Aug 23, 2016Updated 9 years ago
• securesean / Shim-Process-Scanner

  View on GitHub
  Windows x64 Process Scanner to detect application compatability shims
  ☆37Oct 17, 2018Updated 7 years ago
• jackullrich / Windows-API-Fuzzer

  View on GitHub
  Designed to learn OS specific anti-emulation patterns by fuzzing the Windows API.
  ☆99Jul 7, 2020Updated 5 years ago
• anovik / fractals

  View on GitHub
  Fractals using Python 3
  ☆10Apr 9, 2021Updated 4 years ago
• bluefrostsecurity / Meltdown-KVA-Shadow-Leak

  View on GitHub
  ☆49Jun 30, 2020Updated 5 years ago
• jamesboltn / R-demo

  View on GitHub
  The Network project is a C++ encapsulation of WinSock2 to form a lightweight network library; The Graphics project is a C++ encapsulation…
  ☆13Oct 31, 2017Updated 8 years ago
• ironmansoftware / universal-code

  View on GitHub
  Visual Studio Code extension for PowerShell Universal
  ☆15Sep 26, 2025Updated 4 months ago
• llkbkh / Anti-Rootkit

  View on GitHub
  ☆53Dec 21, 2022Updated 3 years ago
• NomanProdhan / malbuzz

  View on GitHub
  It's a handy tool to help you analyze malware. You can use this tool to query your malware samples using different hashes or find all oth…
  ☆20Jul 22, 2025Updated 6 months ago
• holgerflick / tmswebcore2nd

  View on GitHub
  Source code for TMS WEB Core 2nd Edition
  ☆12Apr 16, 2024Updated last year
• Hullgj / report-parser

  View on GitHub
  Cuckoo Sandbox report parser into ransomware classifier
  ☆11Feb 14, 2019Updated 7 years ago
• utoni / KMemDriver

  View on GitHub
  A Windows Memory driver for game hacking purposes. Supports manual mapping with BlackBone and PastDSE.
  ☆43Apr 23, 2021Updated 4 years ago
• ejaz629 / peeler

  View on GitHub
  Ransomware dataset, containing dynamic behaviour of more than 60 distinct ransomware families.
  ☆10Aug 29, 2022Updated 3 years ago
• makitos666 / MFT_Fast_Transcoder

  View on GitHub
  MFT Fast Transcoder is a fast forensic tool to analyze MFT of NTFS partitions.
  ☆12Feb 27, 2023Updated 2 years ago
• lsw29475 / CVE-2018-8611

  View on GitHub
  ☆11Apr 30, 2021Updated 4 years ago
• tdonaworth / Firefox-CVE-2024-9680

  View on GitHub
  ☆11Oct 17, 2024Updated last year