Windows kernel-mode reboot-restore driver — NTFS volume filter with copy-on-write redirection
☆62Jun 11, 2026Updated 3 months ago
Alternatives and similar repositories for SysRestoreDriver
Users that are interested in SysRestoreDriver are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- WinDbg-Samples ExdiGdbSrv fork 修复了一部分Vmware调试的问题☆33Jul 10, 2023Updated 3 years ago
- Modified by Mircosoft detours.Support Window/Linux/Macos. Support X86/x64/ARM64/ARM/MIPS/LongArch.☆50Mar 27, 2025Updated last year
- Toolkits for KPH (KSystemInformer) Dynamic Data .☆34Sep 5, 2026Updated last month
- PoC for covert persistence via Windows Push Task Scheduler (WPTaskScheduler) RPC interface — invisible to schtasks, Get-ScheduledTask, an…☆77Jun 15, 2026Updated 3 months ago
- ☆54Dec 21, 2022Updated 3 years ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- Windows x64 kernel call stack spoofing research project featuring synthetic stack construction, return address manipulation, and stealth-…☆61Apr 6, 2026Updated 5 months ago
- Hook syscalls from ring0 without triggering PatchGuard☆33Oct 29, 2025Updated 11 months ago
- Machine-learning-based function similarity analysis that helps you quickly locate matching functions across different versions of x64 bin…☆43Jun 5, 2026Updated 4 months ago
- Lightweight, dependency-free x86-64 CPU emulation library with Unicorn-like guest mode and direct host-memory execution.☆234May 11, 2026Updated 4 months ago
- DWM hooking-based screenshot tool☆37Sep 13, 2025Updated last year
- ☆35Oct 10, 2023Updated 2 years ago
- A powerful, lightweight PDB (Program Database) viewer tool.☆49Updated this week
- 一个windows内核驱动分析框架，对内核所有导出函数进行挂钩监控☆77Nov 19, 2025Updated 10 months ago
- A method to Disable DSE using .data ptr hooks☆38Feb 1, 2024Updated 2 years ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- a monitoring windows driver calls kernel api tools☆140Jul 5, 2024Updated 2 years ago
- ☆36Sep 12, 2024Updated 2 years ago
- ☆55Nov 21, 2022Updated 3 years ago
- Create stealthy, inline, EPT-like hooks using SMAP and SMEP☆69Oct 19, 2024Updated last year
- x64 PE bin2bin obfuscator which doesn't add a section to the binary☆346Aug 18, 2026Updated last month
- Windows kernel driver demonstrating kernel-to-usermode communication via shared memory sections☆119Apr 24, 2026Updated 5 months ago
- ☆78Sep 16, 2022Updated 4 years ago
- Cheat for my own game SecureGame which uses a bootkit to hyperjack Hyper-V in order to access VBS enclave's memory☆139Dec 8, 2024Updated last year
- Return to a 32-bit environment in an x64 program and trigger a bound exception to communicate with the driver layer via KeRegisterBoundCa…☆24Nov 29, 2025Updated 10 months ago
- Open source password manager - Proton Pass • AdSecurely store, share, and autofill your credentials with Proton Pass, the end-to-end encrypted password manager trusted by millions.
- VMLifter 是一个基于指令执行轨迹的语义提升工具，专注于值依赖驱动的程序语义重建。☆58Mar 9, 2026Updated 6 months ago
- Hijacking Hyper-V at Runtime with DDMA☆158Aug 13, 2025Updated last year
- Use ntdll/ntoskrnl to implement Kernel32, Advapi32 and other APIs. It includes user-mode and kernel-mode.☆100Jun 6, 2026Updated 3 months ago
- A Windows Kernel Driver Emulator base on Unicorn, Kernel Memory Dump and some of native environment☆201Aug 27, 2026Updated last month
- ☆40Apr 17, 2026Updated 5 months ago
- Translate virtual addresses to physical addresses from usermode.☆148Jun 7, 2024Updated 2 years ago
- 内核驱动加载/卸载痕迹清理,努力绕过反作弊吧 PiDDBCacheTable and MmLastUnloadedDriver☆190Feb 11, 2023Updated 3 years ago
- Use GDI in KernelMode☆28Oct 1, 2022Updated 4 years ago
- Open Anti Cheat☆27Jul 16, 2022Updated 4 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- The Kernel-Mode Winsock library, supporting TCP, UDP and Unix sockets (DGRAM and STREAM).☆295Sep 19, 2026Updated 2 weeks ago
- Anti-Rootkit & System kernel management tool☆84Jun 30, 2026Updated 3 months ago
- 从MmPfnData中枚举进程和页目录基址☆228Aug 18, 2023Updated 3 years ago
- ☆52Apr 23, 2026Updated 5 months ago
- Hacker Disassembler Engine - mirro☆26Jul 13, 2022Updated 4 years ago
- Usermode NT Explorer - Query kernel addresses, translate virtual to physical addresses, inspect the PFN database, and more.☆94Mar 16, 2026Updated 6 months ago
- anti cheat drv open source☆20Apr 18, 2024Updated 2 years ago