windows rootkit
☆60May 2, 2024Updated 2 years ago
Alternatives and similar repositories for windows-rootkit
Users that are interested in windows-rootkit are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- A VMBR (Virtual-Machine Based Rootkit) which runs a guest OS and sends the attacker its data☆30Apr 27, 2024Updated 2 years ago
- bootkit驱动映射，三环进程注入加载指定模块☆16Oct 8, 2024Updated 2 years ago
- page table manipulation to gain physical r/w☆44Jun 12, 2026Updated 3 months ago
- PoC kernel to usermode injection☆138Feb 26, 2024Updated 2 years ago
- Libraries written in inline assembly☆19Aug 7, 2023Updated 3 years ago
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- Hook NtDeviceIoControlFile with PatchGuard☆103May 10, 2022Updated 4 years ago
- Dump PDB Symbols including support for Bochs Debugging Format (with wine support)☆14Aug 11, 2023Updated 3 years ago
- Anti-Rootkit Tool for Windows☆16Mar 24, 2025Updated last year
- Black Signature Driver☆26Oct 20, 2023Updated 2 years ago
- Interprocess communication library, providing the ability to call functions from each other☆20Oct 3, 2019Updated 7 years ago
- A simple example how to decrypt kernel debugger data block☆32Feb 8, 2021Updated 5 years ago
- LLVM obfuscation pass, flattening at the basic block's level and turning each basic block into a dispacher and each instruction into a ne…☆48Aug 23, 2021Updated 5 years ago
- intel vt-x type 2 hypervisor☆69Apr 13, 2025Updated last year
- Manual mapper that uses PTE manipulation, Virtual Address Descriptor (VAD) manipulation, and forceful memory allocation to hide executabl…☆420Jan 29, 2022Updated 4 years ago
- Deploy open-source AI quickly and easily - Special Bonus Offer • AdRunpod Hub is built for open source. One-click deployment and autoscaling endpoints without provisioning your own infrastructure.
- 参考taviso的代码逆向一下mpengine.dll☆22Jun 30, 2022Updated 4 years ago
- Enum and Remove Hook in Windows☆54Mar 28, 2026Updated 6 months ago
- Programming/scripting language☆18Jan 3, 2025Updated last year
- Hooking Heavens Gate in a weekend☆12Jan 1, 2022Updated 4 years ago
- manually map driver for a signed driver memory space☆179Mar 11, 2021Updated 5 years ago
- ☆26Aug 9, 2021Updated 5 years ago
- manual map unsigned driver over signed memory☆230Apr 11, 2024Updated 2 years ago
- load unsigned kernel-driver by patching dse in 248 lines☆151Mar 22, 2024Updated 2 years ago
- Kernel driver for detecting Intel VT-x hypervisors.☆203Jul 11, 2023Updated 3 years ago
- Proton VPN Special Offer - Get 70% off • AdSpecial partner offer. Trusted by over 100 million users worldwide. Tested, Approved and Recommended by Experts.
- Custom KiSystemStartup, can be used to modificate kernel before boot.☆52Apr 7, 2022Updated 4 years ago
- 将驱动映射到会话空间☆40Aug 27, 2022Updated 4 years ago
- UnknownField is a tool based clang that obfuscating the order of fields to protect your C/C++ game or code.☆44Jan 21, 2023Updated 3 years ago
- Simple DLL and client app that work together to hook all the functions in WinHvPlatform.dll in order to provide logging and introspection…☆21Dec 1, 2021Updated 4 years ago
- Simple Demo of using Windows Hypervisor Platform☆29Jul 14, 2025Updated last year
- Some research on AltSystemCallHandlers functionality in Windows 10 20H1 18999☆244Nov 6, 2019Updated 6 years ago
- Patches DSE by swapping both data ptrs located in SeValidateImageHeader && SeValidateImageData☆26Feb 9, 2024Updated 2 years ago
- https://www.huorong.cn/☆18Apr 16, 2024Updated 2 years ago
- 跨平台模拟执行unicorn框架基于Qemu的TCG模式(Tiny Code Generator),以无硬件虚拟化支持方式实现全系统的虚拟化,支持跨平台和架构的CPU指令模拟,本文讨论是一款笔者的实验性项目采用Windows Hypervisor Platform虚拟机模式…☆83Dec 17, 2023Updated 2 years ago
- Bare Metal GPUs on DigitalOcean Gradient AI • AdPurpose-built for serious AI teams training foundational models, running large-scale inference, and pushing the boundaries of what's possible.
- Experiment building lifting-bits dependencies with pure CMake. Migrated to:☆21Oct 8, 2024Updated 2 years ago
- A Kernel Driver that can be used for a cheat or malware base to circumvent common cache & structure table checks. PsLoadedModuleList howe…☆225Apr 23, 2026Updated 5 months ago
- A basic 100 loc CPU emulator using the existing code of ntoskrnl.exe☆74Aug 16, 2023Updated 3 years ago
- protector & obfuscator & code virtualizer☆775Updated this week
- Kernel driver with mouse and keyboard input☆128Dec 5, 2023Updated 2 years ago
- Windows inline hooking tool.☆311Oct 7, 2018Updated 8 years ago
- Hiding the window from screenshots using the function win32kfull::ChangeWindowTreeProtection☆11Jan 3, 2022Updated 4 years ago