Windows kernel-mode reboot-restore driver — NTFS volume filter with copy-on-write redirection
☆58Jun 11, 2026Updated last month
Alternatives and similar repositories for SysRestoreDriver
Users that are interested in SysRestoreDriver are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Modified by Mircosoft detours.Support Window/Linux/Macos. Support X86/x64/ARM64/ARM/MIPS/LongArch.☆49Mar 27, 2025Updated last year
- Toolkits for KPH (KSystemInformer) Dynamic Data .☆32Jul 2, 2026Updated last week
- PoC for covert persistence via Windows Push Task Scheduler (WPTaskScheduler) RPC interface — invisible to schtasks, Get-ScheduledTask, an…☆67Jun 15, 2026Updated last month
- An experimental intranet security defense EDR☆32Jun 6, 2026Updated last month
- ☆57Apr 6, 2026Updated 3 months ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Lightweight, dependency-free x86-64 CPU emulation library with Unicorn-like guest mode and direct host-memory execution.☆217May 11, 2026Updated 2 months ago
- Windows kernel driver demonstrating kernel-to-usermode communication via shared memory sections☆108Apr 24, 2026Updated 2 months ago
- WinDbg-Samples ExdiGdbSrv fork 修复了一部分Vmware调试的问题☆33Jul 10, 2023Updated 3 years ago
- Install, update and remove AppImage from your CLI. appimage, linux, package-manager☆19May 21, 2025Updated last year
- Machine-learning-based function similarity analysis that helps you quickly locate matching functions across different versions of x64 bin…☆23Jun 5, 2026Updated last month
- ☆35Oct 10, 2023Updated 2 years ago
- ☆22Jan 15, 2025Updated last year
- 一个windows内核驱动分析框架，对内核所有导出函数进行挂钩监控☆76Nov 19, 2025Updated 7 months ago
- a monitoring windows driver calls kernel api tools☆136Jul 5, 2024Updated 2 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- ☆55Nov 21, 2022Updated 3 years ago
- x64 PE bin2bin obfuscator which doesn't add a section to the binary☆285Updated this week
- Create stealthy, inline, EPT-like hooks using SMAP and SMEP☆64Oct 19, 2024Updated last year
- 无痕hook探测☆51Aug 6, 2025Updated 11 months ago
- Use ntdll/ntoskrnl to implement Kernel32, Advapi32 and other APIs. It includes user-mode and kernel-mode.☆97Jun 6, 2026Updated last month
- ☆35Apr 17, 2026Updated 2 months ago
- ☆75Sep 16, 2022Updated 3 years ago
- Harness to issue Virtual Secure Mode (VSM) "secure calls" from VTL 0 to VTL 1☆80Sep 8, 2025Updated 10 months ago
- 内核驱动加载/卸载痕迹清理,努力绕过反作弊吧 PiDDBCacheTable and MmLastUnloadedDriver☆190Feb 11, 2023Updated 3 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Using the peculiar behaviour of the VPGATHER instructions to determine if an address will fault before it is truly accessed. All done in …☆58Dec 30, 2025Updated 6 months ago
- Themida Devirt Results☆96May 10, 2026Updated 2 months ago
- The Kernel-Mode Winsock library, supporting TCP, UDP and Unix sockets (DGRAM and STREAM).☆291Apr 30, 2026Updated 2 months ago
- Open Anti Cheat☆27Jul 16, 2022Updated 3 years ago
- 从MmPfnData中枚举进程和页目录基址☆218Aug 18, 2023Updated 2 years ago
- Hacker Disassembler Engine - mirro☆26Jul 13, 2022Updated 4 years ago
- anti cheat drv open source☆19Apr 18, 2024Updated 2 years ago
- Helper script for Windows kernel debugging with IDA Pro on VMware + GDB stub (including PDB symbols)☆67Aug 11, 2023Updated 2 years ago
- ☆142Dec 10, 2022Updated 3 years ago
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- Translate virtual addresses to physical addresses from usermode.☆141Jun 7, 2024Updated 2 years ago
- Detecting window hijacking via ETW and GDI table scanning☆25Apr 11, 2026Updated 3 months ago
- 可在非测试模式下符号化读取内核内存。Kernel memory can be read symbolically in non test mode。☆106Sep 1, 2022Updated 3 years ago
- 一个用来做windows内核hook的框架☆185Apr 29, 2025Updated last year
- Demonstrates that NvAPI_D3D11_WksReadScanout (undocumented, interface 0xBCB1C536) can read the GPU scanout buffer directly, bypassing any…☆63Mar 8, 2026Updated 4 months ago
- ☆55Dec 21, 2022Updated 3 years ago
- A simple C++ driver base with KD data block☆11Jun 25, 2022Updated 4 years ago