Windows kernel-mode reboot-restore driver — NTFS volume filter with copy-on-write redirection
☆67Jun 11, 2026Updated 4 months ago
Alternatives and similar repositories for SysRestoreDriver
Users that are interested in SysRestoreDriver are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- WinDbg-Samples ExdiGdbSrv fork 修复了一部分Vmware调试的问题☆34Jul 10, 2023Updated 3 years ago
- Lightweight, dependency-free x86-64 CPU emulation library with Unicorn-like guest mode and direct host-memory execution.☆239May 11, 2026Updated 5 months ago
- 一个windows内核驱动分析框架，对内核所有 导出函数进行挂钩监控☆78Nov 19, 2025Updated 11 months ago
- Experimental Windows kernel driver PoCs for detecting manually mapped drivers via big pool enumeration, PTE walking, CFG data-pointer hoo…☆21Apr 26, 2026Updated 6 months ago
- Toolkits for KPH (KSystemInformer) Dynamic Data .☆34Oct 10, 2026Updated 2 weeks ago
- Proton VPN Special Offer - Get 70% off • AdSpecial partner offer. Trusted by over 100 million users worldwide. Tested, Approved and Recommended by Experts.
- AodFreeze is a kernel-level disk restore / shadow system solution. All changes are automatically cleared after a reboot, effectively prot…☆18Oct 1, 2026Updated 3 weeks ago
- Modified by Mircosoft detours.Support Window/Linux/Macos. Support X86/x64/ARM64/ARM/MIPS/LongArch.☆50Mar 27, 2025Updated last year
- WIP - Type-2 Hypervisor implementation for Intel Processors based on VT-x technology. (Demo)☆21Sep 8, 2026Updated last month
- PoC for covert persistence via Windows Push Task Scheduler (WPTaskScheduler) RPC interface — invisible to schtasks, Get-ScheduledTask, an…☆78Jun 15, 2026Updated 4 months ago
- ☆55Dec 21, 2022Updated 3 years ago
- a monitoring windows driver calls kernel api tools☆142Jul 5, 2024Updated 2 years ago
- 使用 Intel 虚拟化特性实现应用层HOOK☆66Sep 11, 2025Updated last year
- 从MmPfnData中枚举进程和页目录基址☆230Aug 18, 2023Updated 3 years ago
- Type-2 Intel x86-64 hypervisor for Windows focused on tracing control-flow transitions out of obfuscated or virtualized kernel drivers at…☆38Apr 18, 2026Updated 6 months ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- ☆142Dec 10, 2022Updated 3 years ago
- Windows x64 kernel call stack spoofing research project featuring synthetic stack construction, return address manipulation, and stealth-…☆67Apr 6, 2026Updated 6 months ago
- DWM hooking-based screenshot tool☆39Sep 13, 2025Updated last year
- ☆54Nov 21, 2022Updated 3 years ago
- A powerful, lightweight PDB (Program Database) viewer tool.☆49Oct 6, 2026Updated 3 weeks ago
- Hook syscalls from ring0 without triggering PatchGuard☆33Oct 29, 2025Updated last year
- dwm overlay through dx11 render pipeline hook for windows 10/11 24h2+☆43Aug 1, 2026Updated 2 months ago
- 一个用来做windows内核hook的框架☆190Apr 29, 2025Updated last year
- A method to Disable DSE using .data ptr hooks☆37Feb 1, 2024Updated 2 years ago
- End-to-end encrypted cloud storage - Proton Drive • AdSpecial offer: 40% Off Yearly / 80% Off First Month. Protect your most important files, photos, and documents from prying eyes.
- Radical Windows ARK☆256Apr 18, 2025Updated last year
- The Kernel-Mode Winsock library, supporting TCP, UDP and Unix sockets (DGRAM and STREAM).☆297Sep 19, 2026Updated last month
- Create stealthy, inline, EPT-like hooks using SMAP and SMEP☆69Oct 19, 2024Updated 2 years ago
- ☆37Oct 10, 2023Updated 3 years ago
- ☆35Sep 12, 2024Updated 2 years ago
- ☆53Apr 23, 2026Updated 6 months ago
- [Windows Anti-Rootkit] KSword 5.1 is an source-available Windows toolkit for ARK, kernel debugging, and system forensics. KSword 5.1 是面向…☆586Updated this week
- ☆80Sep 16, 2022Updated 4 years ago
- ☆18Sep 26, 2026Updated last month
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Hijacking Hyper-V at Runtime with DDMA☆159Aug 13, 2025Updated last year
- Kernel-mode research tool that demonstrates how Windows DWM enforces WDA_EXCLUDEFROMCAPTURE by directly calling the undocumented win32kfu…☆20Mar 14, 2026Updated 7 months ago
- A Windows Kernel Driver Emulator base on Unicorn, Kernel Memory Dump and some of native environment☆205Aug 27, 2026Updated 2 months ago
- Hacker Disassembler Engine - mirro☆25Jul 13, 2022Updated 4 years ago
- Machine-learning-based function similarity analysis that helps you quickly locate matching functions across different versions of x64 bin…☆44Jun 5, 2026Updated 4 months ago
- Static user/kernel mode library that allows access to all functions and global variables by extracting offsets from the PDB☆137May 29, 2025Updated last year
- Return to a 32-bit environment in an x64 program and trigger a bound exception to communicate with the driver layer via KeRegisterBoundCa…☆25Nov 29, 2025Updated 11 months ago