windows rootkit
☆60May 2, 2024Updated 2 years ago
Alternatives and similar repositories for windows-rootkit
Users that are interested in windows-rootkit are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Anti-Rootkit Tool for Windows☆15Mar 24, 2025Updated last year
- A VMBR (Virtual-Machine Based Rootkit) which runs a guest OS and sends the attacker its data☆28Apr 27, 2024Updated 2 years ago
- bootkit驱动映射，三环进程注入加载指定模块☆14Oct 8, 2024Updated last year
- page table manipulation to gain physical r/w☆43Jun 12, 2026Updated last month
- PoC kernel to usermode injection☆127Feb 26, 2024Updated 2 years ago
- Serverless GPU API endpoints on Runpod - Get Bonus Credits • AdSkip the infrastructure headaches. Auto-scaling, pay-as-you-go, no-ops approach lets you focus on innovating your application.
- Libraries written in inline assembly☆19Aug 7, 2023Updated 2 years ago
- Hook NtDeviceIoControlFile with PatchGuard☆105May 10, 2022Updated 4 years ago
- Dump PDB Symbols including support for Bochs Debugging Format (with wine support)☆14Aug 11, 2023Updated 2 years ago
- Black Signature Driver☆26Oct 20, 2023Updated 2 years ago
- Interprocess communication library, providing the ability to call functions from each other☆20Oct 3, 2019Updated 6 years ago
- A simple example how to decrypt kernel debugger data block☆32Feb 8, 2021Updated 5 years ago
- LLVM obfuscation pass, flattening at the basic block's level and turning each basic block into a dispacher and each instruction into a ne…☆48Aug 23, 2021Updated 4 years ago
- intel vt-x type 2 hypervisor☆67Apr 13, 2025Updated last year
- Manual mapper that uses PTE manipulation, Virtual Address Descriptor (VAD) manipulation, and forceful memory allocation to hide executabl…☆414Jan 29, 2022Updated 4 years ago
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- partially disable patchguard up to win11 21H2☆21Jun 3, 2024Updated 2 years ago
- Enum and Remove Hook in Windows☆53Mar 28, 2026Updated 3 months ago
- Programming/scripting language☆18Jan 3, 2025Updated last year
- Hooking Heavens Gate in a weekend☆13Jan 1, 2022Updated 4 years ago
- ☆74Apr 12, 2023Updated 3 years ago
- manually map driver for a signed driver memory space☆180Mar 11, 2021Updated 5 years ago
- ☆25Aug 9, 2021Updated 4 years ago
- manual map unsigned driver over signed memory☆231Apr 11, 2024Updated 2 years ago
- load unsigned kernel-driver by patching dse in 248 lines☆150Mar 22, 2024Updated 2 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Kernel driver for detecting Intel VT-x hypervisors.☆204Jul 11, 2023Updated 3 years ago
- ☆23May 8, 2023Updated 3 years ago
- Custom KiSystemStartup, can be used to modificate kernel before boot.☆52Apr 7, 2022Updated 4 years ago
- 将驱动映射到会话空间☆39Aug 27, 2022Updated 3 years ago
- UnknownField is a tool based clang that obfuscating the order of fields to protect your C/C++ game or code.☆43Jan 21, 2023Updated 3 years ago
- Simple Demo of using Windows Hypervisor Platform☆29Jul 14, 2025Updated last year
- Some research on AltSystemCallHandlers functionality in Windows 10 20H1 18999☆244Nov 6, 2019Updated 6 years ago
- Patches DSE by swapping both data ptrs located in SeValidateImageHeader && SeValidateImageData☆26Feb 9, 2024Updated 2 years ago
- https://www.huorong.cn/☆18Apr 16, 2024Updated 2 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Simple DLL and client app that work together to hook all the functions in WinHvPlatform.dll in order to provide logging and introspection…☆21Dec 1, 2021Updated 4 years ago
- 跨平台模拟执行unicorn框架基于Qemu的TCG模式(Tiny Code Generator),以无硬件虚拟化支持方式实现全系统的虚拟化,支持跨平台和架构的CPU指令模拟,本文讨论是一款笔者的实验性项目采用Windows Hypervisor Platform虚拟机模式…☆81Dec 17, 2023Updated 2 years ago
- Experiment building lifting-bits dependencies with pure CMake. Migrated to:☆22Oct 8, 2024Updated last year
- A Kernel Driver that can be used for a cheat or malware base to circumvent common cache & structure table checks. PsLoadedModuleList howe…☆216Apr 23, 2026Updated 2 months ago
- protector & obfuscator & code virtualizer☆753Jul 8, 2026Updated last week
- A basic 100 loc CPU emulator using the existing code of ntoskrnl.exe☆75Aug 16, 2023Updated 2 years ago
- Kernel driver with mouse and keyboard input☆125Dec 5, 2023Updated 2 years ago