Alternatives and similar repositories for Poseidon

Users that are interested in Poseidon are comparing it to the libraries listed below

• mactec0 / Kernelmode-manual-mapping-through-IAT

  View on GitHub
  Manual mapping without creating any threads, with rw only access
  ☆804Oct 29, 2019Updated 6 years ago
• charliewolfe / Stealthy-Kernelmode-Injector

  View on GitHub
  Manual mapper that uses PTE manipulation, Virtual Address Descriptor (VAD) manipulation, and forceful memory allocation to hide executabl…
  ☆382Jan 29, 2022Updated 4 years ago
• Astronaut00 / DoubleDataPointer

  View on GitHub
  Allows you to communicate with the kernel mode to manipulate memory in a stealthy way to avoid kernel anticheats.
  ☆172May 8, 2022Updated 3 years ago
• armvirus / CosMapper

  View on GitHub
  Loads a signed kernel driver which allows you to map any driver to kernel mode without any traces of the signed / mapped driver.
  ☆377Aug 8, 2021Updated 4 years ago
• armvirus / SinMapper

  View on GitHub
  usermode driver mapper that forcefully loads any signed kernel driver (legit cert) with a big enough section (example: .data, .rdata) to …
  ☆469Jan 3, 2022Updated 4 years ago
• btbd / smap

  View on GitHub
  DLL scatter manual mapper
  ☆810Apr 10, 2021Updated 4 years ago
• VollRagm / lpmapper

  View on GitHub
  A mapper that maps shellcode into loaded large page drivers
  ☆321Apr 26, 2022Updated 3 years ago
• btbd / modmap

  View on GitHub
  Module extending manual mapper
  ☆380Mar 28, 2020Updated 5 years ago
• adspro15 / km-um-communication

  View on GitHub
  A somewhat wide collection of various kernelmode-usermode communication methods in one repository (mainly just for learning purposes).
  ☆383Sep 18, 2019Updated 6 years ago
• kkent030315 / anycall

  View on GitHub
  x64 Windows kernel code execution via user-mode, arbitrary syscall, vulnerable IOCTLs demonstration
  ☆385Jul 6, 2022Updated 3 years ago
• Sinclairq / DataCommunication

  View on GitHub
  A kernelmode driver swapping a .data pointer in the kernel to perform communication between the kernel and usermode.
  ☆143Oct 20, 2020Updated 5 years ago
• thesecretclub / window_hijack

  View on GitHub
  Rendering on external windows via hijacking thread contexts
  ☆404Jun 28, 2020Updated 5 years ago
• adrianyy / rw_socket_driver

  View on GitHub
  Driver that uses network sockets to communicate with client and read/ write protected process memory.
  ☆622Feb 22, 2019Updated 6 years ago
• EBalloon / Rw-No-Attach

  View on GitHub
  ☆159May 21, 2024Updated last year
• SamuelTulach / meme-rw

  View on GitHub
  Archive R/W into any protected process by changing the value of KTHREAD->PreviousMode
  ☆163Jul 31, 2022Updated 3 years ago
• TheCruZ / EFI_Driver_Access

  View on GitHub
  Efi Driver Access is a simply project to load a driver during system boot with the idea to give the user kernel access for read/write mem…
  ☆473Jan 8, 2023Updated 3 years ago
• nbqofficial / kernel-csgo

  View on GitHub
  Kernel cheat with kernel hook for communication
  ☆295Jul 24, 2021Updated 4 years ago
• kkent030315 / anymapper

  View on GitHub
  x64 Windows kernel driver mapper, inject unsigned driver using anycall
  ☆199Feb 14, 2024Updated 2 years ago
• SamuelTulach / DirectPageManipulation

  View on GitHub
  A basic demonstration of directly overwriting paging structures for physical memory r/w and interprocess memory copy
  ☆103Jun 26, 2023Updated 2 years ago
• ccdescipline / CInject

  View on GitHub
  Windows Kernel inject (no module no thread)
  ☆282Nov 11, 2022Updated 3 years ago
• SamuelTulach / RwxMeme

  View on GitHub
  State of the art DLL injector that took 20 minutes to make
  ☆226Aug 16, 2023Updated 2 years ago
• KANKOSHEV / NoScreen

  View on GitHub
  Hiding the window from screenshots using the function win32kfull::GreProtectSpriteContent
  ☆624Dec 26, 2024Updated last year
• btbd / access

  View on GitHub
  Access without a real handle
  ☆1,033Apr 10, 2021Updated 4 years ago
• ekknod / acdrv

  View on GitHub
  base for testing
  ☆186Sep 28, 2024Updated last year
• btbd / umap

  View on GitHub
  UEFI bootkit for driver manual mapping
  ☆583Jan 1, 2024Updated 2 years ago
• rogerxiii / kernel-codecave-poc

  View on GitHub
  Proof of concept on how to bypass some limitations of a manual mapped driver
  ☆172Oct 24, 2020Updated 5 years ago
• crvvdev / MasterHide

  View on GitHub
  A x64 Windows Rootkit using SSDT or Hypervisor hook
  ☆564Jan 4, 2025Updated last year
• DragonQuestHero / Kernel_Inject

  View on GitHub
  Kernel Inject DLL
  ☆352Mar 21, 2023Updated 2 years ago
• Compiled-Code / eac-mapper

  View on GitHub
  undetected eac mapper
  ☆169May 3, 2022Updated 3 years ago
• BadPlayer555 / KernelGDIDraw

  View on GitHub
  The program draws with win32k gdi functions in the kernel while NtGdiDdDDISubmitCommand is being hooked.
  ☆342Apr 27, 2020Updated 5 years ago
• Compiled-Code / be-injector

  View on GitHub
  ☆223May 10, 2022Updated 3 years ago
• SamuelTulach / mutante

  View on GitHub
  Kernel-mode Windows HWID spoofer
  ☆605Jan 22, 2024Updated 2 years ago
• J0xna / Kernel-Overlay-Hider

  View on GitHub
  ☆148Jan 24, 2024Updated 2 years ago
• M-r-J-o-h-n / SWH-Injector

  View on GitHub
  An Injector that can inject dll into game process protected by anti cheat using SetWindowsHookEx.
  ☆243Jun 6, 2019Updated 6 years ago
• ekknod / sumap

  View on GitHub
  manually map driver for a signed driver memory space
  ☆174Mar 11, 2021Updated 4 years ago
• armasm / EasyAntiPatchGuard

  View on GitHub
  Easy Anti PatchGuard
  ☆223Apr 9, 2021Updated 4 years ago
• SamuelTulach / efi-memory

  View on GitHub
  PoC EFI runtime driver for memory r/w & kdmapper fork
  ☆565Nov 30, 2024Updated last year
• SDXT / MMInject

  View on GitHub
  Kernel DLL Injector using NX Bit Swapping and VAD hide for hiding injected DLL
  ☆220Nov 12, 2020Updated 5 years ago
• skadro-official / skCrypter

  View on GitHub
  Compile-time, Usermode + Kernelmode, safe and lightweight string crypter library for C++11+
  ☆811Jun 3, 2021Updated 4 years ago