Alternatives and similar repositories for windows_note:

Users that are interested in windows_note are comparing it to the libraries listed below

• DeDf / WProtect
  ☆40Updated 5 years ago
• x-tinkerer / Gold
  ☆9Updated 11 years ago
• tongzeyu / HookSysenter
  hook sysenter，重载内核，下硬件断点到debugport，防止debugport清零
  ☆23Updated 10 years ago
• binbibi / CallbackEx
  Demo List cm/ps/ob/minifilter callback And Patch/Bypass it
  ☆28Updated 7 years ago
• alexvogt91 / NetDriver
  kernel-mode TDI client which can send and receive HTTP requests
  ☆55Updated 6 years ago
• AzureGreen / ArkToolDrv
  An ark tool's driver
  ☆40Updated 7 years ago
• xiaobfly / AnalyzePdb
  ☆27Updated 5 years ago
• hkxiaoyu118 / KernelBase
  Windows 驱动开发基础函数库，供个人使用
  ☆14Updated 5 years ago
• killvxk / WebbrowserLock
  Locked home page for Internet Explorer.
  ☆21Updated 11 years ago
• 474172261 / DataProtector
  A simple ransomware defender.It uses minifilter to filt "rewrite" and "delete" events in kernel.And it handles event in user mode.
  ☆27Updated 6 years ago
• zhuhuibeishadiao / KernelHooksDetection_x64
  x64 Kernel Hooks Detection
  ☆24Updated 8 years ago
• hostzhen / sysark
  Sysark全称system anti-rootkit，是我学习内核写的工具（2013年的代码，后续不会再更新），里面基本上所有的功能都是用内核实现的。这里只是实现了反rootkit部分功能，作为工具的话，本人觉得还欠完善，但作为学习，或有人需要。目前针对的是XP SP2，…
  ☆27Updated 7 years ago
• ZhanLang / msddk
  windows driver develop kit with c++ mail:maguojun123@126.com
  ☆47Updated 5 years ago
• MiroKaku / Learning-Example
  For Example. See Miro's Blog
  ☆30Updated 2 years ago
• japajoe / StackVMCPP
  A stack and register based virtual machine which can compile and execute arbitrary code in runtime
  ☆42Updated 2 years ago
• JokerRound / FlieSystemFilter
  A file system filter, you can do some interesting thing, maybe it's cool.
  ☆56Updated 6 years ago
• 0xbadc0de1 / VmP_DBG
  This is a VmProtect integrated debugger, that will essentially allow you to disasm and debug vmp partially virtualized functions at the v…
  ☆45Updated 8 years ago
• smartdj / pdbexp
  PDB Explorer 是一个能够查看微软 pdb 文件（Program DataBase，程序数据库）的工具，它能够将 pdb 文件中的 struct、union 及 enum 类型的定义以 C/C++ 的语法显示出来，特别适合 Windows 底层研究人员及 DDK …
  ☆37Updated 9 years ago
• jnastarot / native_peloader
  PE(compressed dll) memory loader using nt api
  ☆44Updated 7 years ago
• phonegapX / Dotfuscator_x86
  一个32位windows下x86指令集的代码扭曲加密小工具
  ☆32Updated 5 years ago
• BrunoMCBraga / Kernel-Whisperer
  ☆28Updated 4 years ago
• Iamgublin / libemu_pe
  enable libemu run pe file and add some good modify
  ☆14Updated 6 years ago
• KelvinMsft / UsbMon
  ☆34Updated 4 years ago
• nanoric / pkn
  core of pkn game hacking project. Including mainly for process management, memory management, and DLL injecttion. Also PE analysis, windo…
  ☆64Updated 5 years ago
• bronzeMe / SSDT_Hook_x64
  ☆36Updated 7 years ago
• GoodstudyChina / USBlocker
  ☆17Updated 6 years ago
• zhuhuibeishadiao / DriverMaper
  map driver to memory
  ☆25Updated 6 years ago
• zzhouhe / x96_POC
  A poc of embedding x64 code into x86 PE file
  ☆17Updated 5 years ago
• DragonQuestHero / YouDontNeedInstallWDK
  You don't need install any wdk for development kernel driver
  ☆24Updated 6 years ago
• eladraz / XDK
  XDK is a fully featured C++ wrapper library for Windows kernel development
  ☆20Updated 9 years ago