Alternatives and similar repositories for Hermes

Users that are interested in Hermes are comparing it to the libraries listed below

• xsh3llsh0ck / ResilienceKit
  Another UEFI runtime bootkit
  ☆29Updated 2 years ago
• msrspsvceret / checkm8
  bypassing intel txt's tboot integrity checks via coreboot shim
  ☆70Updated 4 months ago
• killvxk / uefi-rootkit
  ☆36Updated 3 years ago
• jussihi / SMM-Rootkit
  SMM rootkit similar to LoJax or MosaicRegressor
  ☆128Updated last year
• dmaivel / ntoseye
  Windows kernel debugger for Linux hosts running Windows under KVM/QEMU
  ☆88Updated last month
• xsh3llsh0ck / Deadwing
  SMM driver/rootkit for platform memory access with R3 <-> R0 <-> R-2 communication.
  ☆88Updated 9 months ago
• Cr4sh / pico_dma
  Autonomous pre-boot DMA attack hardware implant for M.2 slot based on PicoEVB development board
  ☆84Updated last year
• xsh3llsh0ck / MilkBox
  Tool to dump EFI runtime drivers.
  ☆36Updated last year
• tandasat / hvext
  The Windbg extensions to study Hyper-V on Intel and AMD processors.
  ☆153Updated 4 months ago
• SamuelTulach / PwnedBoot
  Using Windows' own bootloader as a shim to bypass Secure Boot
  ☆174Updated 11 months ago
• Fatmike-GH / Fatpack
  A Windows executable (PE) packer (x64) with LZMA compression and with full TLS (Thread Local Storage) support
  ☆67Updated 3 weeks ago
• zer0condition / Demystifying-PatchGuard
  Demystifying PatchGuard is a comprehensive analysis of Microsoft's security feature called PatchGuard, which is designed to prevent unaut…
  ☆124Updated 2 years ago
• 3intermute / ramiel
  uefi diskless persistence technique + OVMF secureboot bypass
  ☆81Updated last year
• synctop / tpm-mmio
  Using MMIO (Memory-Mapped I/O) to read TPM 2.0 public Endorsement Key.
  ☆46Updated last year
• tandasat / CVE-2023-36427
  Report and exploit of CVE-2023-36427
  ☆90Updated last year
• tandasat / recon2024_demo
  Provides commands to read from and write to arbitrary kernel-mode memory for users with the Administrator privilege. HVCI compatible. No …
  ☆21Updated last year
• ekknod / smm
  alternative smm driver for ryzen motherboards
  ☆152Updated 9 months ago
• kkent030315 / Van1338
  A journal for $6,000 Riot Vanguard bounty.
  ☆64Updated last year
• SamuelTulach / HookGuard
  Hooking Windows' exception dispatcher to protect process's PML4
  ☆181Updated 5 months ago
• tandasat / CVE-2024-21305
  Report and exploit of CVE-2024-21305.
  ☆36Updated last year
• gerhart01 / Hyper-V-Tools
  Different tools for Microsoft Hyper-V researching
  ☆58Updated 3 weeks ago
• FunnyWhaleDev / AlterLoadDll
  Load dll with undocumented functions and debug symbols
  ☆47Updated 11 months ago
• carlos-al / user-kernel-syscall-hook
  ☆91Updated last year
• senko37 / drvload-bootkit
  EFI bootkit for loading unsigned drivers
  ☆18Updated last year
• KiFilterFiberContext / warbird-hook
  Using Microsoft Warbird to automatically unpack and execute encrypted shellcode in ClipSp.sys without triggering PatchGuard
  ☆248Updated 2 years ago
• brew02 / BudgetEPT
  Create stealthy, inline, EPT-like hooks using SMAP and SMEP
  ☆55Updated 8 months ago
• android1337 / brkida
  C++ macro for x64 programs that breaks ida hex-rays decompiler tool.
  ☆122Updated last year
• Dump-GUY / IDA_PHNT_TYPES
  Converted phnt (Native API header files from the System Informer project) to IDA TIL, IDC (Hex-Rays).
  ☆146Updated 10 months ago
• Tserith / Parasite
  Compact MBR Bootkit for Windows
  ☆53Updated 3 years ago
• HyperDbg / awesome
  A list of awesome resources about HyperDbg
  ☆74Updated last month