Alternatives and similar repositories for WPP:

Users that are interested in WPP are comparing it to the libraries listed below

• ZehMatt / zyemu
  x86-64 user mode emulation using Zydis
  ☆45Updated 2 months ago
• RIscRIpt / wdmcpp
  Visual Studio Project example for using Microsoft's STL in WDM (Windows Kernel-mode Driver)
  ☆25Updated 3 years ago
• yardenshafir / InformationClasses
  Documenting system information classes and their uses
  ☆50Updated 3 years ago
• mihaly044 / pedigest
  Helper functions for calculating the authenticode digest for a portable executable file
  ☆15Updated 4 years ago
• GetRektBoy724 / KPDB
  Windows PDB parser for kernel-mode environment.
  ☆95Updated 2 years ago
• zodiacon / DbgPrint
  Debug Print viewer (user and kernel)
  ☆65Updated last year
• brew02 / BudgetEPT
  Create stealthy, inline, EPT-like hooks using SMAP and SMEP
  ☆36Updated 5 months ago
• MiroKaku / Musa.Core
  Use ntdll/ntoskrnl to implement Kernel32, Advapi32 and other APIs. It includes user-mode and kernel-mode.
  ☆77Updated 5 months ago
• daaximus / arch_enum
  A small tool for rapid enumeration of CPUID, and MSR fields.
  ☆21Updated last year
• POPFD / HypervisorBase
  A library for intel VT-x hypervisor functionality supporting EPT shadowing.
  ☆49Updated 4 years ago
• SHA-MRIZ / DisplayMiniportHooking
  ☆45Updated 4 years ago
• fly55555 / ExdiGdbSrv
  WinDbg-Samples ExdiGdbSrv fork 修复了一部分Vmware调试的问题
  ☆25Updated last year
• ZehMatt / x86Tester
  x86-64 Automated test data generator
  ☆18Updated 2 months ago
• nevioo1337 / VMHide
  Bypasses VMProtect's VMWare & VMWare Tools detection trough user-mode API hooks.
  ☆14Updated 7 months ago
• Oliver-1-1 / EtwKeyboardDetection
  ☆29Updated 6 months ago
• Iizerd / BDASM
  Binary DisASseMbler
  ☆23Updated 2 years ago
• ExpLife0011 / KeUserModeCallBack
  A Simple Example
  ☆21Updated 6 years ago
• BeneficialCode / KReClassEx
  Kernel ReClassEx
  ☆65Updated last year
• can1357 / xstd
  A portable header only library extending the C++20 STL.
  ☆73Updated 11 months ago
• 0ffffffffh / system_call_hook_win10_1903
  This is the P.O.C source for hooking the system calls on Windows 10 (1903) using it's dynamic trace feature weakness
  ☆51Updated 5 years ago
• kyle-elliott / DVM
  Symbolic Execution based on lifting amd64 to z3
  ☆26Updated 8 months ago
• samshine / VoyagerWithEPT
  ☆34Updated 2 years ago
• LLVMParty / args
  Minimal header-only C++11 argument parser library for simple command line tools.
  ☆24Updated last month
• ThomasonZhao / InfinityHookProMax
  InfinityHookProMax: Make InfinityHook great great again
  ☆43Updated last year
• xtremegamer1 / vmdevirt-vtil
  ☆27Updated last year
• mibho / x64dbg-vmp-trace
  unorthodox approach to analyze a trace, but this helped me get comfy with x64 instructions overall (excluding sse/avx/etc lol), cleared u…
  ☆57Updated last year
• crvvdev / intraceptor
  Intraceptor intercept Windows NT API calls and redirect them to a kernel driver to bypass process/threads handle protections.
  ☆29Updated 2 years ago
• kkent030315 / CiGetCertPublisherName
  An example code of CiGetCertPublisherName
  ☆14Updated 3 years ago
• NewWorldComingSoon / OAC
  Open Anti Cheat
  ☆27Updated 2 years ago
• 1401199262 / NMIStackWalk
  ☆71Updated 2 years ago