Alternatives and similar repositories for disable-threat-tracing

Users that are interested in disable-threat-tracing are comparing it to the libraries listed below

• muturikaranja / kernel-windowless-wndproc-hook

  View on GitHub
  hooks gServerHandlers xxxEventWndProc
  ☆13May 1, 2022Updated 3 years ago
• muturikaranja / overlay

  View on GitHub
  UD overlay using SetWindowsHookEx
  ☆16Apr 29, 2022Updated 3 years ago
• helloobaby / pdbtoheader

  View on GitHub
  pdb's function and global vars to offset
  ☆10Apr 11, 2023Updated 2 years ago
• helloobaby / HyperTool

  View on GitHub
  Intel learning hypervisor and some extend function
  ☆23Aug 23, 2025Updated 5 months ago
• EBalloon / MapPage

  View on GitHub
  Mapping your code on a 0x1000 size page
  ☆71May 20, 2022Updated 3 years ago
• ekknod / KiSystemStartupMeme

  View on GitHub
  Custom KiSystemStartup, can be used to modificate kernel before boot.
  ☆53Apr 7, 2022Updated 3 years ago
• Dy-Baby / PageTableHook

  View on GitHub
  ☆17Dec 18, 2022Updated 3 years ago
• thecatkitty / nt-native

  View on GitHub
  An example of Windows NT Native API application and kernel driver
  ☆22Feb 10, 2020Updated 6 years ago
• SamuelTulach / EasyUefi

  View on GitHub
  Visual Studio template for GNU-EFI
  ☆16May 16, 2022Updated 3 years ago
• EBalloon / Remap

  View on GitHub
  ☆49Feb 21, 2022Updated 3 years ago
• serbx / KernelVtableFunctionHook

  View on GitHub
  ☆20May 17, 2022Updated 3 years ago
• 1401199262 / HookHvcallCodeVa

  View on GitHub
  ☆23May 8, 2023Updated 2 years ago
• cedy88 / OLD_R6_External_Reworked

  View on GitHub
  ☆15Dec 2, 2021Updated 4 years ago
• cs1ime / DICHook

  View on GitHub
  Hook NtDeviceIoControlFile with PatchGuard
  ☆107May 10, 2022Updated 3 years ago
• ldebug / BetaShield

  View on GitHub
  BetaShield Windows x86 Ring3 Anticheat v2
  ☆42Jan 11, 2017Updated 9 years ago
• helloobaby / Nmi-Callback

  View on GitHub
  detect hypervisor with Nmi Callback
  ☆42Sep 25, 2022Updated 3 years ago
• MapleSwan / SessionMapper

  View on GitHub
  将驱动映射到会话空间
  ☆38Aug 27, 2022Updated 3 years ago
• CKCat / VMProtect-2-Reverse-Engineering

  View on GitHub
  ☆24Apr 12, 2022Updated 3 years ago
• Kqlu666 / 3d-Injector

  View on GitHub
  ☆19Apr 14, 2023Updated 2 years ago
• krinkinmu / intel-vmx

  View on GitHub
  Example of intel virtualization extensions usage
  ☆10Dec 15, 2016Updated 9 years ago
• r1cky33 / valorant-external-cheat

  View on GitHub
  ☆16Apr 10, 2025Updated 10 months ago
• chaeyk / eac-leak

  View on GitHub
  this application shows EAC sdk's memory leak.
  ☆10Nov 30, 2021Updated 4 years ago
• KANKOSHEV / Detect-VM-and-Hypervisor

  View on GitHub
  Detect VM and Hypervisor
  ☆10Jun 16, 2021Updated 4 years ago
• lennyRBLX / window_hijack

  View on GitHub
  Rendering on external windows via hijacking thread contexts, with notes on ValidateHwnd
  ☆14Jul 9, 2020Updated 5 years ago
• samshine / ScyllaHideDetector2

  View on GitHub
  Allows you to find the use of ScyllaHide, if your program will debug and restore hooking functions bytes.
  ☆26Aug 3, 2019Updated 6 years ago
• Sentient111 / ClearDriverTraces

  View on GitHub
  clearing traces of a loaded driver
  ☆47Jul 2, 2022Updated 3 years ago
• KANKOSHEV / Detect-MouseClassServiceCallback

  View on GitHub
  mouseclassservicecallback detection via hook
  ☆52Feb 7, 2022Updated 4 years ago
• stuxnet147 / Win-Kernel-CR3Protect

  View on GitHub
  A minimal CR3 protection PoC (KdpTrap hook)
  ☆15Jan 25, 2025Updated last year
• craids / AresFramework

  View on GitHub
  Win32 PE Anti-RE and Anti-debugging Framework
  ☆13May 14, 2019Updated 6 years ago
• cxy128 / PTE-Hook

  View on GitHub
  PTE hook
  ☆33Jun 15, 2024Updated last year
• paidtoomuch / apex-legends

  View on GitHub
  ☆17Jul 2, 2022Updated 3 years ago
• KANKOSHEV / Detect-HiddenThread-via-KPRCB

  View on GitHub
  Detect removed thread from PspCidTable.
  ☆75Mar 18, 2022Updated 3 years ago
• mackiiN / KernelHackBase

  View on GitHub
  ☆47Nov 26, 2020Updated 5 years ago
• crtdll / battleye-decryption

  View on GitHub
  Decrypts multiple BattlEye packets from BEService<>BEDaisy (including those with multiple encryption layers) out to a console.
  ☆27Apr 14, 2022Updated 3 years ago
• EBalloon / MmCopyMemory

  View on GitHub
  ☆23May 17, 2022Updated 3 years ago
• alex-ilgayev / ida-pro-junk-code-removal

  View on GitHub
  ☆56Feb 27, 2020Updated 5 years ago
• boom-cr3 / VTableKFunctionHook

  View on GitHub
  This project will give you an example how you can hook a kernel vtable function that cannot be directly called
  ☆84Dec 25, 2021Updated 4 years ago
• EBalloon / ThreadNotify

  View on GitHub
  ☆12Oct 12, 2021Updated 4 years ago
• idarlingid / rust-cheat-paste

  View on GitHub
  ROOT AKA BEZNOGIY :(
  ☆19Oct 21, 2021Updated 4 years ago