Windows Kernel Security: Memory Integrity Verification with Disk Verification of ntoskrnl.exe
☆28Mar 23, 2025Updated last year
Alternatives and similar repositories for DetectNtoskrnlIntegrity
Users that are interested in DetectNtoskrnlIntegrity are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- 基于Unicorn仿真PE模拟☆35May 3, 2026Updated 2 months ago
- Shows an example of how to implement VT-d/AMD-Vi on Windows☆183Sep 22, 2023Updated 2 years ago
- Toolkits for KPH (KSystemInformer) Dynamic Data .☆32Updated this week
- Emulate Drivers in RING3 with self context mapping or unicorn☆21Jan 1, 2025Updated last year
- 无痕hook探测☆51Aug 6, 2025Updated 11 months ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- 对Windbg以Exdi模式下调试windows做一些修复☆21Aug 25, 2023Updated 2 years ago
- pg bypass for win10-win11 (learn from NP)☆17Oct 28, 2025Updated 8 months ago
- ☆24Aug 27, 2025Updated 10 months ago
- anti cheat drv open source☆19Apr 18, 2024Updated 2 years ago
- WinPools is an example of how Windows kernel big pool addresses can be leaking using NtQuerySystemInformation☆15Jun 23, 2019Updated 7 years ago
- ntos shit☆32Feb 15, 2024Updated 2 years ago
- MCP for ReClass.NET☆18Dec 31, 2025Updated 6 months ago
- WinDbg-Samples ExdiGdbSrv fork 修复了一部分Vmware调试的问题☆34Jul 10, 2023Updated 3 years ago
- ☆15Mar 4, 2021Updated 5 years ago
- GPUs on demand by Runpod - Special Offer Available • AdRun AI, ML, and HPC workloads on powerful cloud GPUs—without limits or wasted spend. Deploy GPUs in under a minute and pay by the second.
- PE Sections Packer + Loader for Windows - Packs a DLL/EXE file and maps it into the loader (C/C++)☆14Oct 19, 2025Updated 9 months ago
- Executes Read/Write process memory with `NtQueryCompositionSurfaceStatistics`☆24Feb 10, 2024Updated 2 years ago
- IDA Pro plugin AntiXorstr☆160Feb 24, 2025Updated last year
- Basic C++20 Type Polymorphism && Type Translation☆17Aug 1, 2025Updated 11 months ago
- a monitoring windows driver calls kernel api tools☆137Jul 5, 2024Updated 2 years ago
- Windows kernel driver demonstrating kernel-to-usermode communication via shared memory sections☆111Apr 24, 2026Updated 3 months ago
- Using MMIO (Memory-Mapped I/O) to read TPM 2.0 public Endorsement Key.☆55May 29, 2024Updated 2 years ago
- NDC Oslo 2019 slides and demos☆33Nov 26, 2020Updated 5 years ago
- Windows kernel driver that detects hypervisors by probing SIDT/LIDT edge cases, paging/TLB behaviors, privilege transitions, and timing e…☆48Mar 3, 2026Updated 4 months ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Hijacking Hyper-V at Runtime with DDMA☆147Aug 13, 2025Updated 11 months ago
- Based on nt5src☆16Jul 12, 2023Updated 3 years ago
- 一个windows内核驱动分析框架，对内核所有导出函数进行挂钩监控☆76Nov 19, 2025Updated 8 months ago
- 一个用来做windows内核hook的框架☆186Apr 29, 2025Updated last year
- Synchronized Kernel Drawing for 24H2☆23Oct 9, 2025Updated 9 months ago
- Three different shellcode techniques on the Windows Kernel☆17Apr 8, 2025Updated last year
- MiniSDK☆10Nov 8, 2021Updated 4 years ago
- A Kernel Driver that can be used for a cheat or malware base to circumvent common cache & structure table checks. PsLoadedModuleList howe…☆214Apr 23, 2026Updated 3 months ago
- Windows hypervisor for Intel x64: defensive host hypervisor for Windows designed to mitigate kernel-level attacks including BYOVD, compat…☆269Updated this week
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Cheat for my own game SecureGame which uses a bootkit to hyperjack Hyper-V in order to access VBS enclave's memory☆131Dec 8, 2024Updated last year
- A series of methods used to detect kernel shellcode for tencent game safe race 2024☆46Apr 22, 2024Updated 2 years ago
- nmi stackwalking + module verification☆173Dec 28, 2023Updated 2 years ago
- 大部分常见windows内核文件合集 感谢以下网站给出的版本号参考☆16Mar 4, 2026Updated 4 months ago
- modern c++ wrapper around the microsoft portable executable file format☆37Nov 22, 2025Updated 8 months ago
- kASLR bypass technique on Intel CPUs.☆34May 18, 2025Updated last year
- 针对windows rootkit的一些检测，分别从进程、端口、文件这三个方面进行检测。☆21Jan 16, 2025Updated last year