smallzhong / myvt

Related projects: ⓘ

• qq1045551070 / VtToMe
  之前学习X64VT写的代码，很多坑，但是大体的逻辑还是完整的。现发出来给更多想学VT的人参考...
  ☆67Updated 3 years ago
• DragonQuestHero / WindowsSyscallsEx
  Quick check of NT kernel exported&unexported functions/global variable offset NT内核导出以及未导出函数+全局变量偏移速查
  ☆90Updated last year
• ilovecsad / Ark
  ☆78Updated 2 years ago
• TimelifeCzy / kHypervisorBasic
  VT Hook
  ☆42Updated 2 months ago
• DragonQuestHero / WindowsKernelPrivateSymbolsDump
  Win7内核私有符号结构转储
  ☆64Updated 3 years ago
• zzhouhe / PG1903
  ☆105Updated 4 years ago
• stonedreamforest / Navy_public
  轻量级自动分析病毒程序调用上下文、游戏反调试实现技术平台
  ☆94Updated 4 years ago
• qq1045551070 / ShotHv
  ShotHv
  ☆116Updated 2 years ago
• smallzhong / KernelHook
  一个用来做windows内核hook的框架
  ☆78Updated 5 months ago
• Kerrbty / RemoteLoadDll
  远程注入无导入函数dll，自动重定位以后内存加载dll
  ☆44Updated 5 years ago
• IcEy-999 / Ntoskrnl_Viewer
  可在非测试模式下符号化读取内核内存。Kernel memory can be read symbolically in non test mode。
  ☆100Updated 2 years ago
• FiYHer / kdmapper
  驱动加载器 -> 利用iqvw64e.sys映射驱动
  ☆48Updated 4 years ago
• DragonQuestHero / DwmDraw
  不使用3环挂钩进行DWM桌面绘制
  ☆77Updated 2 years ago
• Oxygen1a1 / DrvMon
  a monitoring windows driver calls kernel api tools
  ☆87Updated 2 months ago
• hackflame / ida_python_extractCode
  ida提取特征码脚本
  ☆53Updated 4 years ago
• fIappy / FpVTProject
  intel vt-x hypervisor ept
  ☆26Updated 4 years ago
• Jhinxs / ntoskrnl
  收集常用windows版本内核文件
  ☆31Updated last year
• FiYHer / driver_callback_bypass_1909
  研究和移除各种内核回调,在anti anti cheat的路上越走越远
  ☆165Updated 2 years ago
• DearXiaoGui / InfinityHookPro-main
  ☆46Updated last year
• wanttobeno / Win64DriverStudy_Src
  WIN64驱动编程基础教程-源码 作者：胡文亮
  ☆84Updated 6 years ago
• liangfei44 / VmWareThrough
  ☆178Updated last year
• zhuhuibeishadiao / MiniVTx64
  Intel Virtualization Technology demo
  ☆64Updated 7 years ago
• amateurVV / AmateurVT
  ☆30Updated 8 months ago
• ilovecsad / veh_hide_memory
  ☆68Updated 2 years ago
• bekdepo / ZhuHuiBeiShaDiaoARK
  ☆49Updated this week
• huoji120 / MakeInfinityHookGreatAgain
  让Etwhook再次伟大! Make InfinityHook Great Again!
  ☆120Updated 3 years ago
• bb33bb / r3epthook
  使用vt进行无痕hook，支持r3
  ☆48Updated 5 years ago
• zouxianyu / PhysicalMemoryRW
  the basic version of the ring0 physical memory read/write tool
  ☆86Updated 5 years ago
• hz86 / peloader
  内存加载DLL 支持X86和X64（Memory PELoader Support X86 and X64）
  ☆29Updated last year
• zzhouhe / x96_POC
  A poc of embedding x64 code into x86 PE file
  ☆14Updated 4 years ago