Alternatives and similar repositories for KernelHack

Users that are interested in KernelHack are comparing it to the libraries listed below

• MapleSwan / SessionMapper
  将驱动映射到会话空间
  ☆35Updated 2 years ago
• Cesusius / FakeDriver
  Execute anything in a legit memory region by attacking a windows driver
  ☆19Updated last year
• 0xGREG / registry-callbacks
  UM-KM Communication using registry callbacks
  ☆40Updated 5 years ago
• Sentient111 / ClearDriverTraces
  clearing traces of a loaded driver
  ☆47Updated 3 years ago
• 3499409631 / ReadPhysicalMemory-Without-API
  This project can bypass most of the AC except for some perverts that enable VT to monitor page tables
  ☆45Updated last year
• pTerrance / alpc-km-um
  POC usermode <=> kernel communication via ALPC.
  ☆61Updated last year
• SiyahS4ncak / S4Mapper
  ☆25Updated last year
• Dy-Baby / ReadWriteDriver
  ☆12Updated 2 years ago
• rogxo / DisableDSE
  A method to Disable DSE using .data ptr hooks
  ☆33Updated last year
• 1401199262 / NMIStackWalk
  ☆74Updated 2 years ago
• ilovecsad / dwmhook
  ☆17Updated 2 years ago
• kitty8904 / blanket
  Hiding a system thread against conventional means of detection
  ☆40Updated 4 years ago
• ekknod / Nmi
  Old way for blocking NMI interrupts
  ☆27Updated 2 years ago
• EBalloon / Remap
  ☆46Updated 3 years ago
• EBalloon / MapPage
  Mapping your code on a 0x1000 size page
  ☆72Updated 3 years ago
• oakboat / UCReadDriver
  ☆26Updated 11 months ago
• TygoL / kdmapper-mdl
  ☆50Updated last year
• ekknod / MouseClassServiceCallbackTrick
  ☆53Updated 2 years ago
• Colortune112 / kernel_and_injector_llvm
  ☆22Updated 2 years ago
• Zpes / pte-protect
  ☆32Updated 3 years ago
• EBalloon / MmCopyMemory
  ☆21Updated 3 years ago
• misslng / boundcallback
  ☆26Updated last year
• ilovecsad / veh_hide_memory
  ☆70Updated 3 years ago
• EBalloon / Common-Registry
  ☆48Updated 3 years ago
• Dy-Baby / pte-protect
  ☆20Updated 3 years ago
• ItzPAX / supermode
  page table manipulation to gain physical r/w
  ☆43Updated last year
• cs1ime / sehcall
  Windows X64 mode use seh in manual mapped dll or manual mapped sys
  ☆72Updated 2 years ago
• ZEROWyt / Driver-Bypass-need-FINISH
  Bypass using kernel driver (not finish).
  ☆21Updated 2 years ago
• helloobaby / Nmi-Callback
  detect hypervisor with Nmi Callback
  ☆39Updated 2 years ago
• Spuckwaffel / Simple-MmcopyMemory-Hook
  A simple MmCopyMemory hook.
  ☆38Updated 3 years ago