Alternatives and similar repositories for nightshade

Users that are interested in nightshade are comparing it to the libraries listed below

• alal4465 / Practical-Reverse-Engineering-Solutions

  View on GitHub
  Some drivers I've written while solving exercises from Practical Reverse Engineering
  ☆15Jan 9, 2022Updated 4 years ago
• bigbang95 / icmp_tunnel

  View on GitHub
  一个简单的 稳定 ICMP 传输 示例，在公网中传输可能有点慢，但很稳定，适合初学者
  ☆11Mar 9, 2022Updated 3 years ago
• fly55555 / ntoskrnl

  View on GitHub
  大部分常见windows内核文件合集 下方链接里有更多更全面的
  ☆16Oct 23, 2023Updated 2 years ago
• KNSoft / KNSoft.NDK

  View on GitHub
  KNSoft.NDK provides native C/C++ definitions and import libraries for Windows NT.
  ☆20Updated this week
• megabytefisher / SilentBreakpoints

  View on GitHub
  a method for undetectable breakpoints in 32-bit Windows programs
  ☆13May 15, 2014Updated 11 years ago
• evilashz / FRP-0.38-DomainFronting

  View on GitHub
  域前置版本FRP
  ☆16Nov 24, 2022Updated 3 years ago
• DownWithUp / WinPools

  View on GitHub
  WinPools is an example of how Windows kernel big pool addresses can be leaking using NtQuerySystemInformation
  ☆15Jun 23, 2019Updated 6 years ago
• vxcall / ZwDetectMemoryRead

  View on GitHub
  neat way to detect memory read using nt layer function.
  ☆14Aug 4, 2023Updated 2 years ago
• MahmoudZohdy / Anti-Analysis-DebuggerInjection

  View on GitHub
  Anti-Analysis technique, trick the debugger by Hiding events from it.
  ☆20Sep 6, 2021Updated 4 years ago
• MiroKaku / HRSword-Portable

  View on GitHub
  https://www.huorong.cn/
  ☆15Apr 16, 2024Updated last year
• boom-cr3 / NotifyRoutineHijackThread

  View on GitHub
  Hijack NotifyRoutine for a kernelmode thread
  ☆41Jun 4, 2022Updated 3 years ago
• igromanru / Cpp-FindPattern

  View on GitHub
  ☆13Sep 21, 2025Updated 4 months ago
• 1027565 / InstrumentationCallbacks

  View on GitHub
  A native Windows library for intercepting kernel-to-user transitions using instrumentation callbacks
  ☆28Feb 3, 2024Updated 2 years ago
• CZashi / win-reverse

  View on GitHub
  ntos shit
  ☆30Feb 15, 2024Updated last year
• kouzhudong / AntiHook

  View on GitHub
  Enum and Remove Hook in Windows
  ☆48Dec 11, 2025Updated 2 months ago
• m1n9yu3 / AutoNop

  View on GitHub
  ida 对抗 花指令, 基于 ida 7.5 sdk 编写
  ☆19Jan 22, 2024Updated 2 years ago
• Oxygen1a1 / InfinityHookClass

  View on GitHub
  EtwHook for win7-win11;
  ☆23Sep 13, 2022Updated 3 years ago
• fobricia / VisualAssist-keygen-demo

  View on GitHub
  ☆24Sep 16, 2020Updated 5 years ago
• CyberSecurityUP / AV-Bypass-codes

  View on GitHub
  Python, C++ and Go
  ☆22Sep 23, 2022Updated 3 years ago
• abbodi1406 / dotNetFx35W81

  View on GitHub
  .NET 3.5 Feature Installer for Windows 8.1 x86/x64
  ☆25Aug 18, 2023Updated 2 years ago
• Nou4r / PresentInjector

  View on GitHub
  A simple present scene, kernel allocation injector.
  ☆27Jun 12, 2022Updated 3 years ago
• bopin2020 / WindowsCamp

  View on GitHub
  Windows Kernel Knowledge && Collect Resources on the wire && Nothing innovation by myself &&
  ☆62Jan 29, 2026Updated 2 weeks ago
• UnkownC1ppl3 / Kernel-Mode-Injector-Loader

  View on GitHub
  Keyauth Loader + Kernel Injector
  ☆26Jun 7, 2024Updated last year
• SaltedFishBayonet / Windows-Kernel-Crypto

  View on GitHub
  Windows kernel driver encryption library, support base64, aes-256, rsa-2048 and higher, ecc-256, single file, minimal dependence, support…
  ☆22May 20, 2021Updated 4 years ago
• ZEROWyt / Overwatch-2-TOPE-EXTERNAL-CHEAT

  View on GitHub
  overwatch2 tope external
  ☆26Jun 18, 2024Updated last year
• ReFo0 / hwidinfo

  View on GitHub
  Hardware ID
  ☆64Apr 21, 2022Updated 3 years ago
• codereversing / ted_api

  View on GitHub
  ☆35Oct 18, 2022Updated 3 years ago
• crvvdev / intraceptor

  View on GitHub
  Intraceptor intercept Windows NT API calls and redirect them to a kernel driver to bypass process/threads handle protections.
  ☆32May 18, 2022Updated 3 years ago
• abhishekemmanuel / kernel-dll-injector

  View on GitHub
  Kernel mode to user mode dll injection.
  ☆14Nov 10, 2024Updated last year
• ekknod / Nmi

  View on GitHub
  Old way for blocking NMI interrupts
  ☆29Sep 6, 2022Updated 3 years ago
• EBalloon / MapPage

  View on GitHub
  Mapping your code on a 0x1000 size page
  ☆71May 20, 2022Updated 3 years ago
• danielkrupinski / PE2HEX

  View on GitHub
  PE executable to array of bytes converter
  ☆25Dec 21, 2019Updated 6 years ago
• ranni0225 / WRK

  View on GitHub
  Windows Research Kernel
  ☆38Sep 22, 2025Updated 4 months ago
• J0xna / Kernel-Overlay-Hider

  View on GitHub
  ☆148Jan 24, 2024Updated 2 years ago
• HollyZoe / Open-ByteAntiCheat

  View on GitHub
  Open source anti cheat engine
  ☆43Jul 9, 2024Updated last year
• DarkLineX / unpackFlutter

  View on GitHub
  Flutter/Dart Snapshot Reverse Tool。
  ☆44Feb 15, 2023Updated 2 years ago
• RenardDev / Detours

  View on GitHub
  A set of Windows 10+/VS2022/C++14 tools for working with software modifications in two files (Detours.h, Detours.cpp).
  ☆46Feb 1, 2026Updated last week
• MahmoudZohdy / IAT-Obfuscation

  View on GitHub
  IAT-Obfuscation to make static analysis of executable harder.
  ☆44Sep 6, 2021Updated 4 years ago
• dot1991 / lilypublic

  View on GitHub
  ☆39May 29, 2022Updated 3 years ago