Detecting window hijacking via ETW and GDI table scanning
☆33Apr 11, 2026Updated 7 months ago
Alternatives and similar repositories for winbo
Users that are interested in winbo are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- C++ library for sending processor interrupts via x2apic & xapic☆17Oct 3, 2026Updated last month
- portable executable file parser written in modern c++ (20)☆29Oct 28, 2026Updated 2 weeks ago
- Surgical x64 VEH/VCH dumper. Walks the vectored exception handler list, extracts each handler as a standalone PE64 that IDA opens directl…☆20Jul 17, 2026Updated 3 months ago
- modern C++ gui & rendering framework with abstracted STL & CRT☆24Jun 19, 2026Updated 4 months ago
- modern C++ communication model built using SSL sockets☆16Jun 21, 2026Updated 4 months ago
- Bare Metal GPUs on DigitalOcean Gradient AI • AdPurpose-built for serious AI teams training foundational models, running large-scale inference, and pushing the boundaries of what's possible.
- PDB parsing mapper, resolves private symbols and structure offsets.☆12Sep 25, 2026Updated last month
- Kernel anti-cheat for protecting software.☆164Jul 2, 2026Updated 4 months ago
- Implementing STL C++ classes in Kernel Env ( with some differences )☆11Aug 8, 2025Updated last year
- Patches DSE by swapping both data ptrs located in SeValidateImageHeader && SeValidateImageData☆27Feb 9, 2024Updated 2 years ago
- x64 PE bin2bin obfuscator which doesn't add a section to the binary☆359Aug 18, 2026Updated 2 months ago
- Leveraging TPM2 TCG Logs (Measured Boot) to Detect UEFI Drivers and Pre-Boot Applications☆25Mar 28, 2025Updated last year
- UEFI SMM mapper with hot reload☆30Jul 5, 2026Updated 4 months ago
- "Bypassing" HVCI via donor PFN swaps to modify read-only code pages. Call chained kernel functions (kCET and SLAT support), and more.☆152Mar 16, 2026Updated 7 months ago
- DWM Overlay Demonstration for 25H2☆27Jan 5, 2026Updated 10 months ago
- Proton VPN Special Offer - Get 70% off • AdSpecial partner offer. Trusted by over 100 million users worldwide. Tested, Approved and Recommended by Experts.
- Threadless Shared Memory Driver via Registry Callback and MDL for user-kernel communication.☆11Jan 15, 2026Updated 9 months ago
- AMD Type-2 Hypervisor (Unslopped)☆33Feb 23, 2026Updated 8 months ago
- Nocturnal-HV is a Simple Type 2 SVM Hypervisor☆23May 11, 2026Updated 6 months ago
- dwm overlay through dx11 render pipeline hook for windows 10/11 24h2+☆46Aug 1, 2026Updated 3 months ago
- Demonstrates that NvAPI_D3D11_WksReadScanout (undocumented, interface 0xBCB1C536) can read the GPU scanout buffer directly, bypassing any…☆102Mar 8, 2026Updated 8 months ago
- Various techniques used to bypass SMEP in the Windows Kernel.☆21Apr 20, 2025Updated last year
- DMA-based DLL injector using MemProcFS/Hyper-V to map and execute payloads inside a guest VM process entirely from the host — no guest ke…☆17Mar 13, 2026Updated 8 months ago
- Anticheat pagewalking for memory backing☆16Sep 2, 2026Updated 2 months ago
- memory introspection and reverse engineering hypervisor powered by leveraging Hyper-V☆863Oct 30, 2026Updated 2 weeks ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Translate virtual addresses to physical addresses from usermode.☆148Jun 7, 2024Updated 2 years ago
- Windows kernel driver that detects hypervisors by probing SIDT/LIDT edge cases, paging/TLB behaviors, privilege transitions, and timing e…☆50Mar 3, 2026Updated 8 months ago
- A kernel exploit leveraging NtUserHardErrorControl to elevate a thread to KernelMode and achieve arbitrary kernel R/W & more.☆60Sep 20, 2022Updated 4 years ago
- Searchable archive of Windows kernel symbols, struct layouts, function RVAs and byte patterns extracted from Microsoft PDBs and pinned to…☆16Oct 11, 2026Updated last month
- Repository of different kernel drivers written while studying Windows NT Driver development☆13Apr 14, 2024Updated 2 years ago
- Windows kernel ROP-only implant exposing R/W primitives☆59Feb 1, 2026Updated 9 months ago
- Inline syscalls, hidden calls : - Resolves syscall IDs dynamically at runtime - Uses PE parsing to avoid runtime memory patching - Writte…☆15Jan 2, 2025Updated last year
- ☆28Jun 4, 2026Updated 5 months ago
- An advanced singular header-only C++20 obfuscation library with encryption and polymorphism.☆148Sep 17, 2026Updated last month
- End-to-end encrypted email - Proton Mail • AdSpecial offer: 40% Off Yearly / 80% Off First Month. All Proton services are open source and independently audited for security.
- nmi stackwalking + module verification☆189Dec 28, 2023Updated 2 years ago
- Proof-of-Concept exploit for CVE-2026-32223☆22Apr 17, 2026Updated 6 months ago
- 无痕hook探测☆50Aug 6, 2025Updated last year
- anti cheat drv open source☆20Apr 18, 2024Updated 2 years ago
- ☆21Aug 25, 2023Updated 3 years ago
- 参考taviso的代码逆向一下mpengine.dll☆22Jun 30, 2022Updated 4 years ago
- Windows x64 kernel driver research project focused on driver image remapping(manual mapping), system-call callback hijacking, and user-mo…☆24Sep 4, 2026Updated 2 months ago
Are these results useful?